A política de segurança da informação do tribunal de justiça da Paraíba: uma análise baseada na NBR ISO 27002

Abstract

Ensuring the security of information is a fundamental point that must be, independent of the type of industry, because the information has always been a key asset for organizations; protect it became essential to get competitive advantages. However, security´s assurance needs controls capable of ensuring basic security attributes policies (confidentiality, integrity, availability and authenticity). In the case study treated in this work - Court of Paraiba, the security´s police of information, known as a fundamental element in any system or security, needs to be aligned with the best practices recognized worldwide. For the understanding of this subject, a bibliography research was made based on books, laws, rules, etc., to verify the degree of alignment or conformity of that court security policy (under implementation) with diagnostic evidence submitted by ISO 27002.