Manual de boas práticas de segurança da informação para os sistemas de telemedicina tendo como base a norma ABNT NBR ISO/IEC 27002 e o framework CIS Controls

• Ano de defesa: 2023
• Autor(a) principal: Querido, Guilherme Gondim
• Outros Autores: [e-mail]
• Orientador(a): Werneck, Vera Maria Benjamim
• Banca de defesa: Costa, Rosa Maria Esteves Moreira da , Campos, Fernanda Claudia Alves
• Tipo de documento: Dissertação
• Tipo de acesso: Acesso aberto
• Idioma: por
• Instituição de defesa: Universidade do Estado do Rio de Janeiro
• Programa de Pós-Graduação: Programa de Pós-Graduação em Telemedicina e Telessaúde
• Departamento: Centro Biomédico::Faculdade de Ciências Médicas
• País: Brasil
• Palavras-chave em Português: Gestão de Segurança da Informação; Telemedicina; Riscos em segurança da informação; Segurança da informação - Normas; Segurança da informação - Riscos; ISO 27002
• Palavras-chave em Inglês: ISO/IEC 27002; CIS Controls; Information Security Management; Telemedicine; Information security risks
• Área do conhecimento CNPq: CIENCIAS EXATAS E DA TERRA::CIENCIA DA COMPUTACAO::SISTEMAS DE COMPUTACAO::TELEINFORMATICA
• Link de acesso: http://www.bdtd.uerj.br/handle/1/22780

Organizations that use ISO/IEC 27002 and the CIS Controls framework for managing the security of their information are concerned with the reliability, integrity and availability of information meaning that they can securely manage their information. Currently, there are laws with the purpose of dealing with data protection, and these standards are relevant support in compliance with such rules. Compliance with ISO/IEC 27002 and the CIS Controls framework are mandatory for any organization that wants to remain competitive by ensuring the best market practices. The big issue to be reported is that the information protection within an organization depends on several internal and external factors that need previously to be managed. The ISO/IEC 27002 standard and the CIS Controls framework are generic to be applied in any sector, therefore not being instantiated in a good practice manual for the Telemedicine sector. In this sense, the main contribution of this study is the presentation of a proposal for oriented and systematized processes and sub-processes in the form of a manual of good practices, which direct and guide the implementation and maintenance of an information security management system for the Telemedicine, aiming to guarantee the reliability, integrity, and availability of information through the ISO/IEC 27002 standard and the CIS Controls framework. In other words, the good practices presented to serve all Telemedicine systems are intended to guarantee an acceptable degree of Information Security, preventing data from being improperly shared. For this purpose, the best practices manual was presented to guide professionals in the health sector regarding the procedures that must be adopted in telemedicine systems concerning information security.