Fatores que influenciam a aceitação de práticas avançadas de gestão de segurança da informação: um estudo com gestores públicos estaduais no Brasil

• Ano de defesa: 2009
• Autor(a) principal: Nobre, Anna Cláudia dos Santos
• Orientador(a): Ramos, Anatália Saraiva Martins
• Tipo de documento: Dissertação
• Tipo de acesso: Acesso aberto
• Idioma: por
• Instituição de defesa: Universidade Federal do Rio Grande do Norte
• Programa de Pós-Graduação: Programa de Pós-Graduação em Administração
• Departamento: Políticas e Gestão Públicas; Gestão Organizacional
• País: BR
• Palavras-chave em Português: Gestão de segurança da informação; Certificação ISO 27001; Modelo de aceitação de tecnologia TAM
• Palavras-chave em Inglês: Information security management; ISO 27001 certification; Technology Acceptance Model TAM
• Área do conhecimento CNPq: CNPQ::CIENCIAS SOCIAIS APLICADAS::ADMINISTRACAO
• Link de acesso: https://repositorio.ufrn.br/jspui/handle/123456789/12138

This study examines the factors that influence public managers in the adoption of advanced practices related to Information Security Management. This research used, as the basis of assertions, Security Standard ISO 27001:2005 and theoretical model based on TAM (Technology Acceptance Model) from Venkatesh and Davis (2000). The method adopted was field research of national scope with participation of eighty public administrators from states of Brazil, all of them managers and planners of state governments. The approach was quantitative and research methods were descriptive statistics, factor analysis and multiple linear regression for data analysis. The survey results showed correlation between the constructs of the TAM model (ease of use, perceptions of value, attitude and intention to use) and agreement with the assertions made in accordance with ISO 27001, showing that these factors influence the managers in adoption of such practices. On the other independent variables of the model (organizational profile, demographic profile and managers behavior) no significant correlation was identified with the assertions of the same standard, witch means the need for expansion researches using such constructs. It is hoped that this study may contribute positively to the progress on discussions about Information Security Management, Adoption of Safety Standards and Technology Acceptance Model