Cumprimento das normas de segurança da informação e comunicações na Marinha do Brasil

Abstract

The Brazilian Navy demands confidence in the efficiency and effectiveness of the information and communications with which it works, to fulfill its constitutional mission. Therefore, it complies with a set of Information and Communication Security standards, as well as a system that aims to build a compliance mentality. Under this approach, this case study is established on the management of Information and Communications Security (SIC) in the Brazilian Navy, in which the control practices related to the SIC implemented in this institution were analyzed. Information and Communications Security is an extremely important aspect that is handled by most large existing organizations. Electronic systems and technological resources currently used - such as e-mails, internet, computers, notebooks, software - are necessary for companies and Military Organizations to maintain a high level of productivity and security. In this work, conformity assessments of the SIC management in Military Organizations are carried out in relation to the existing standards in the Brazilian Navy, as well as to the ABNT NBR ISO/IEC 17799 standards - Information Technology - Security Techniques - Code of Practice for Management of Information Security and the ABNT NBR ISO/IEC 27002 – Code of Practice for Information Security Management. It is in this context that the main concepts related to SIC are presented, as well as its management, making an analysis/evaluation of how practices related to the subject are being managed within Military Organizations and presenting the results, emphasizing its relevance, consolidating in a methodological preparation for future research work