Análise da Política de Segurança da Informação da Universidade Federal de Alfenas à luz da Política Nacional de Segurança da Informação

Abstract

Information security in the Federal Public Administration is a critical and increasingly important topic due to the rising incidents of security breaches and data leaks. In this context, the research focuses on analyzing the information security policy of the Federal University of Alfenas (UNIFAL-MG) in relation to relevant legislation. This study aims to provide a comprehensive examination of UNIFAL-MG's information security policy to ensure compliance with existing legislation. Specific objectives include conducting a literature review on information security policies, government policies, and legal regulations related to the Federal Public Administration. Additionally, the research will involve scrutinizing UNIFAL-MG's information security policy to identify areas requiring alignment with the National Information Security Policy and proposing necessary adjustments to the policy. The significance of this study lies in safeguarding the information and information systems used by public agencies, which are crucial for ensuring efficiency and transparency in services provided to the public. Adherence to these regulations is mandatory, and legal compliance is vital from legal, administrative, and social perspectives. During the development of UNIFAL-MG's information security policy, a structured approach was followed, involving participation in training courses, the formation of a Working Group within the scope of the Information Technology Management Committee, and a thorough examination of pertinent legislation. The research methodology adopted is of an applied nature, with exploratory and descriptive objectives. It includes an analysis of identified non-compliances and gaps, adhering to guidelines stipulated by applicable laws, regulations, and special attention to Decree No. 9,637/2018. The research will also draw on legal documents, such as administrative acts and internal regulations of the institution, including directives and resolutions issued by the Digital Governance Committee and University Council. This study aims to contribute to the alignment of UNIFAL-MG's information security policy with existing legislation, thereby ensuring effective protection of data and information systems within the institution and, consequently, promoting efficiency and transparency in the services provided to the community.