Política de segurança da informação: uma contribuição para o Campus IV

Abstract

This monograph discusses the importance of information security policy as a means to ensure organization’s information security. The objective of this paper is to contribute to an Information Security Policy (IFP) towards an educational institution situated in Rio Tinto and Mamanguape, state of Paraiba, specifically Paraiba Federal University - Campus IV. Currently there are some methodologies and best practices suggested by Information Security and Knowledge Management being adopted, such as the ones created by the Economic Development and Cooperation Organization (OCDE); a review on the literature regarding the theme, as well as the inherent practices established by it was conducted to understand critical factors for success and the main difficulties that organizations face to create barriers and protect themselves from attacks and threats, whether virtual or not. As an exploratory research, a case study methodology was used, but with enough flexibility to understand the complexity involved with the object of study. Furthermore, a comparison was made between ISO / IEC 27002:2005 standards (as parameters) and two educational institutions’ IFP available on the internet to understand what is important and what is not, and how to write an IFP. A contribution to the UFPB’s security department was developed as a part of this final research work.