Modelo de gestão de risco em segurança da informação: um estudo de caso no mercado brasileiro de cartões de crédito

• Ano de defesa: 2003
• Autor(a) principal: Hori, Andre Shigueru
• Orientador(a): Leite, Jaci Corrêa
• Tipo de documento: Dissertação
• Tipo de acesso: Acesso aberto
• Idioma: por
• Palavras-chave em Português: Administração da produção e sistemas de informação; Segurança da informação; Segurança de redes; Gerenciamento de risco; Segurança de computadores
• Link de acesso: http://hdl.handle.net/10438/2216

The concerns regarding managing information security risks are already part of the Brazilian enterprise environment’s reality. The business processes' expansion towards the information systems based on technology made the number of threats grow as well as the vulnerability of the computer and communication networks. Several are the challenges regarding the security information area’s infrastructure, and also the implementation of it within a given company. This study analysis the different ways of building up a managing information security risks’ infrastructure, not only at the technology level but also at the operational level as well as on regarding the marketing concepts, establishing a clear relation to all other internal areas of the company, and also to customers and to the marketplace itself. The information security, often taken as a technology matter, is now seen as a business process; consequently, it is understood by the enterprise world as a real competitive advantage