Gestão de segurança de informação: estudo de caso aplicado a um escritório de advocacia

Abstract

The information technologies have built a new way of life for society. The way to produce information has changed and how that information is stored, too. It appeared in the midst of so many innovations, concern for the security of the data produced, and the databases of companies that are responsible for much of the country's economy remained vulnerable to potential threats that exist in electronic form. So it is interesting to investigate how corporate governance deals with this issue. This research aimed to identify vulnerabilities in procedures for information management in a law firm from the perspective of information security. However, there was a lack of publications on the subject area related to librarianship. The methods and research techniques applied properly, it is concluded that the investigated company made significant investments in information technology, but were found vulnerabilities in the systems of information security, from the failure to manage not have a policy security access for all, not to use methods of classification of information and not update the existing safety procedures periodically. In addition to these measures of information protection, the survey also provided measures to minimize the impacts identified in the caudate for risk analysis and risk questionnaire.