Implementação de ferramentas de segurança da informação em pequenas empresas

Abstract

The present work of course completion presents a case study that addresses the information security in small companies. It maps the main Information Technology services used and identifies the flaws present in the network environment as well as physical flaws that can be crucial to a cyber attack. Develops a manual of good practices to be followed by employees and suggests tools to improve the company's network security based on ABNT ISO/IEC 27001, ABNT ISO/IEC 27002 and ABNT ISO/IEC 27005 standards.