Loading...
Publication
Análise da gestão da segurança da informação: estudo de caso de uma empresa do setor dos transportes rodoviários de mercadorias e armazenagem
| Name: | Description: | Size: | Format: | |
|---|---|---|---|---|
| 3.65 MB | Adobe PDF |
Authors
Advisor(s)
Abstract(s)
A introdução dos Sistemas de Informação (SI) e das Tecnologias de Informação (TI) traduz-se num conjunto de desafios e exigências com que as organizações se vêm confrontadas e cujas respostas dependem da cultura organizacional e das pessoas que as constituem.
A informação tem, hoje em dia, um papel fundamental nas organizações, espera- se que esta seja a fonte do funcionamento tático, estratégico e operacional, gerando vantagem competitiva nos mercados. A sua crescente importância conduziu a um problema, antigamente a partilha de informação apenas se registava por iterações pessoais, contudo, agora existem elementos como pessoas, processos, ambientes e tecnologias que podem contribuir para sérios problemas de segurança da informação nas empresas e influenciar diretamente no seu crescimento. É difícil e complexo controlar todos estes elementos mas existem práticas de segurança de informação que garantem que a informação certa esteja disponível no tempo certo, para que a pessoa certa possa tomar a decisão estratégica adequada.
Neste trabalho, a empresa escolhida pertence ao setor dos transportes rodoviários de mercadorias e armazenagem e o estudo de caso baseia-se na análise dos seus vários departamentos relativamente aos processos e procedimentos existentes sobre segurança da informação aliada à perceção da postura da empresa sobre a problemática abordada.
A gestão da segurança da informação da empresa apresenta algumas falhas. Desta forma, seria vantajoso a elaboração de um conjunto de políticas e regulamentos que uniformizem todo o processo e contribuam para a segurança dos dados da empresa.
The introduction of Information Systems (IS) and Information Technologies (IT) translates into a set of challenges and demands that organizations are faced with and whose responses depend on the organizational culture and the people that constitute them. Information nowadays has a fundamental role in organizations, it is expected that this is the source of the tactical, strategic and operational functioning, generating competitive advantage in the markets. Its growing importance has led to a problem, in the past information sharing was only registered through personal iterations, however, there are now elements such as people, processes, environments and technologies that can contribute to serious information security problems in companies and directly influence its growth. Controlling all these elements is difficult and complex, but there are information security practices that ensure that the right information is available at the right time, so that the right person can make the right strategic decision. In this essay, the chosen company belongs to the road transport of goods and storage sector and the case study is based on the analysis of its various departments in relation to the existing processes and procedures regarding information security combined with the perception of the company's posture on the problematic addressed. The management of the company's information security has some flaws. Thus, it would be advantageous to develop a set of policies and regulations that would standardize the entire process and contribute to the security of the company's data.
The introduction of Information Systems (IS) and Information Technologies (IT) translates into a set of challenges and demands that organizations are faced with and whose responses depend on the organizational culture and the people that constitute them. Information nowadays has a fundamental role in organizations, it is expected that this is the source of the tactical, strategic and operational functioning, generating competitive advantage in the markets. Its growing importance has led to a problem, in the past information sharing was only registered through personal iterations, however, there are now elements such as people, processes, environments and technologies that can contribute to serious information security problems in companies and directly influence its growth. Controlling all these elements is difficult and complex, but there are information security practices that ensure that the right information is available at the right time, so that the right person can make the right strategic decision. In this essay, the chosen company belongs to the road transport of goods and storage sector and the case study is based on the analysis of its various departments in relation to the existing processes and procedures regarding information security combined with the perception of the company's posture on the problematic addressed. The management of the company's information security has some flaws. Thus, it would be advantageous to develop a set of policies and regulations that would standardize the entire process and contribute to the security of the company's data.
Description
Keywords
Sistemas de Informação Informação Segurança Transportes rodoviários de mercadorias e armazenagem Information Systems Information Security Road transport of goods and storage