Combatendo a ameaça ransomware aplicando a norma ISO/IEC 27001:2013 na gestão da segurança da informação

Abstract

This essay presents a study about the nowadays scenario of Information Security, related to the evolution and rising of the numbers of incidents caused by ransomwares, a specific kind of malware with unique characteristics which causes substantial monetary losses to several companies, showing the relevance from this threat to the organizations. In front of data obtained through researches and showed here, it was proposed the adoption of controls described in the ISO 27001: 2013 norm, which is a globally recognized norm describing a range of controls, used on implementations of an Information Security Management System.