Gestão da segurança da informação: práticas de segurança da informação implementadas em duas organizações baianas

Abstract

The public and private organizations have been demonstrating a lack of company´s information protection. By tradition, they give more attention to the security of patrimonial and financial goods. In this research were investigated the information security practices implemented in two organizations of the state of Bahia-Brazil, if they were adherent to security existenting default and the consequences of not implementing the adequate controls to reduce the present risks in their enviroment. Bibliographical review about the theme and cases studies were made in two organizations of the state of Bahia-Brazil. It can be perceived the lack of management of information security. In these organizations there are only some isolated security measures implemented. The conclusion drawn is that in the studied orgaizations, the information security practices not frequently are adopted to reduce present risks in their enviroment. This let them to be more vulnerable to occur security breaches, facilitating loss of confidenciality, integrity and availability of information.