| Name: | Description: | Size: | Format: | |
|---|---|---|---|---|
| 574.17 KB | Adobe PDF |
Advisor(s)
Abstract(s)
Numa Era caracterizada pela importancia da ınformaçâo, a generalidade das organizaçoes depende fortemente dos Sistemas de Informaçâo para o desempenho da sua missäo. Para as Autarquías Locais, onde se verificam constantes mudanças nos processos organizacionais com o objetivo de uma melhor utilizaçâo económica, eficiente e equitativa dos recursos públicos, os Sistemas de Informaçâo säo um fator-chave. Ao lidarem diariamente com informaçâo confidencial estäo sujeitas a obrigaçoes de conformidade ética e legal que geram grande responsabilidade na gestâo da informaçâo que tratam e produzem. Com este estudo de caso pretendeuse aferir, através da aplicaçâo de um inquérito por questionário baseado na ISO/ IEC 27002:2013 associado a um modelo de maturidade qual o grau de maturidade dos controlos de segurança do Sistema de Informaçâo num Municipio do Médio Tejo (MMT). A aplicaçâo destas ferramentas permitiu identificar quais as áreas mais críticas e formas de melhorar os processos.
In a time characterized by the importance of information, most organizations strongly depend on information systems for the fulfilment of their mission. For local Municipality Halls, where there are constant changes in organizational processes aimed at economically, efficiently and equitably improving the usage of public resources, information systems are key factors. Dealing daily with confidential information, they are subject to obligations of ethical and legal conformity that imply great responsibility in the management of the information they process and generate. This study aimed at understanding, through a questionnaire based on ISO/IEC 27002:2013 associated with a maturity model, what is the degree of maturity of the security controls in the information system of a municipality in the Médio Tejo region (MMT). The application of these tools allowed the identification of the most critical areas and ways to improve processes.
In a time characterized by the importance of information, most organizations strongly depend on information systems for the fulfilment of their mission. For local Municipality Halls, where there are constant changes in organizational processes aimed at economically, efficiently and equitably improving the usage of public resources, information systems are key factors. Dealing daily with confidential information, they are subject to obligations of ethical and legal conformity that imply great responsibility in the management of the information they process and generate. This study aimed at understanding, through a questionnaire based on ISO/IEC 27002:2013 associated with a maturity model, what is the degree of maturity of the security controls in the information system of a municipality in the Médio Tejo region (MMT). The application of these tools allowed the identification of the most critical areas and ways to improve processes.
Description
Keywords
Autarquias Locais ISO/IEC 27002:2013 modelo de maturidade Segurança da Informação