Verificação do grau de adequação da segurança física e do ambiente dos laboratórios de informática do CCAE conforme a norma NBR ISO/IEC 27002

Abstract

The present work shows the study done at laboratory of informatics of the courses of Bachelor of Information Systems and Graduation of Computer Science of Applied Science and Education Centre, at University Federal of Paraiba to verify the security compliance of these laboratories according to the section 9 of the NBR 27002, dealing specifically with the physical and environmental security management. To do this, a research was done on the current situation of laboratories, using questionnaires, interviews and site visits to help bring the reality of security offered in laboratories. Given the current scenario, a comparison was performed in the laboratories based on recommendations of the physical and environmental security described in chapter 9 (nine) of NBR 27002. Using the web model to manage risks, a confrontation was made to show the degree of compliance with the NBR 2700. This model is also used to develop and implement a solution to be applied in laboratories in order to reduce or avoid the risks or the occurrence of a security incident.