Metodologia para institucionalização de normas de segurança da informação em um ambiente corporativo

Abstract

This work aims to develop a new information security policy for a private company based on ABNT rules and current laws. For this purpose, the company’s current policy was used as a basis, and research on current good information security practices was carried out, as well as the necessary adjustments to fit the policy to the new federal law on the protection of personal data. As a result, a new policy was created updating the company’s safety standards and offering guidelines for continuous improvement from now on.