Análise e implantação de uma ferramenta de gestão de tratamento de incidentes de segurança da informação

Abstract

Information security is the protection of information that an organization has, eliminating the risks that affect the confidentiality, integrity, availability and authenticity of this information. Information security policies require a formal set of rules that must be followed and will be the organization's information security management. This course conclusion work aims at the analysis and implementation of a treatment tool management of information security incidents. Using the case study Information Technology and Communication Center of the Federal University of Pampa, adopted in order to understand the main concepts of information security and security incidents. In the analysis of the current information security incident handling management model they are identified favorable points for the implementation of the new automated management model. The implementation of a tool that assists in managing the treatment of security incidents taking into account the information security processes run in the core was carried out. The consolidation of deployment is given through a step by step installation that was presented to the Information and Communication Technology Center team. It was found that the deployment tool can speed up the response processes to security incidents increasing security by automating processes, centralizing information and reducing costs for human resources of the organization.