Gestão da segurança da informação em colégios: uma análise da utilização da norma NBR ISO/IEC 17799

• Ano de defesa: 2007
• Autor(a) principal: Baldissera, Thiago Andre
• Orientador(a): Nunes, Raul Ceretta
• Banca de defesa: Godoy, Leoni Pentiado, Gaspary, Luciano Paschoal
• Tipo de documento: Dissertação
• Tipo de acesso: Acesso aberto
• Idioma: por
• Instituição de defesa: Universidade Federal de Santa Maria; Centro de Tecnologia
• Programa de Pós-Graduação: Programa de Pós-Graduação em Engenharia de Produção
• Departamento: Engenharia de Produção
• País: Brasil
• Palavras-chave em Português: NBR ISO/IEC 17799; Segurança da informação; Gestão de recursos de TI
• Palavras-chave em Inglês: Security of information; Management of resources from TI
• Área do conhecimento CNPq: CNPQ::ENGENHARIAS::ENGENHARIA DE PRODUCAO
• Link de acesso: http://repositorio.ufsm.br/handle/1/27317

In a globalized world, competitive, and with increasing advances in the area of technology of communications and computer science, the information is presented in all the areas and sectors of an organization. Thus, to the organizations, the information started to be one of the main involved assets in the success of business, needing to be protected its trustworthy, integrity and availability. The present dissertation presents a study on the Information Security Management in schools, detaching the most important aspects for occasion of the implementation of security controls based on Norm NBR ISO/IEC 17799 (Information technology – Code of pratice for information for information security management) in the security management of information connected in resources of Information Technology (IT). As result this dissertation presents: (i) a study about the Norm NBR ISO/IEC 17799; (ii) a known methodology for implementation of the same one and that it involves stages as the confection of Politics of Security and the construction of a Matrix of Analysis of Risks; (iii) the time and the costs for the fulfilment of each stage of the methodology proposal; (iv) which had been the costs involved in the human resources, and (v) which had been the critical points for the success of the work.