Segurança da Informação na administração pública: o caso da Controladoria Geral do Estado da Paraíba

Abstract

The present work has as general objective to identify the existence of information security policies adopted in a state public administration body. The methodology used was descriptive, bibliographical and qualitative review with a case study carried out at the General Comptroller's Office of the State of Paraíba (CGE-PB), data collection was performed through a questionnaire and a semi-structured interview, both performed with the maximum leader of this Organization, to obtain knowledge of their perception on several points of the implementation of information security, the data analyzes used were: descriptive analysis for the questionnaire and qualitative analysis for the interview, in the qualitative analysis was used the MAXQDA software. The research concluded that there are some Information Security Policies (PSI) deployed in CGE-PB, such as backup, antivirus, access controls, but it has been found that there are some difficulties for a good PSI practice such as training of service providers, Lack of interest of the employees and the lack of a manual containing all the PSI's and being widely divulged to all the collaborators of the organization.