Fatores que influenciam a aceitação de práticas avançadas de gestão de segurança da informação: um estudo com gestores públicos estaduais no Brasil

This study examines the factors that influence public managers in the adoption of advanced practices related to Information Security Management. This research used, as the basis of assertions, Security Standard ISO 27001:2005 and theoretical model based on TAM (Technology Acceptance Model) from Venkatesh and Davis (2000). The method adopted was field research of national scope with participation of eighty public administrators from states of Brazil, all of them managers and planners of state governments. The approach was quantitative and research methods were descriptive statistics, factor analysis and multiple linear regression for data analysis. The survey results showed correlation between the constructs of the TAM model (ease of use, perceptions of value, attitude and intention to use) and agreement with the assertions made in accordance with ISO 27001, showing that these factors influence the managers in adoption of such practices. On the other independent variables of the model (organizational profile, demographic profile and managers behavior) no significant correlation was identified with the assertions of the same standard, witch means the need for expansion researches using such constructs. It is hoped that this study may contribute positively to the progress on discussions about Information Security Management, Adoption of Safety Standards and Technology Acceptance Model

Aspectos do gerenciamento de riscos de tecnologia da informação nas empresas: um estudo de caso múltiplos

The information technology - IT- benefits have been more perceived during the last decades. Both IT and business managers are dealing with subjects like governance, IT-Business alignment, information security and others on their top priorities. Talking about governance, specifically, managers are facing it with a technical approach, that gives emphasis on protection against invasions, antivirus systems, access controls and others technical issues. The IT risk management, commonly, is faced under this approach, that means, has its importance reduced and delegated to IT Departments. On the last two decades, a new IT risk management perspective raised, bringing an holistic view of IT risk to the organization. According to this new perspective, the strategies formulation process should take into account the IT risks. With the growing of IT dependence on most of organizations, the necessity of a better comprehension about the subject becomes more clear. This work shows a study in three public organizations of the Pernambuco State that investigates how those organizations manage their IT risks. Structured interviews were made with IT managers, and later, analyzed and compared with conceptual categories found in the literature. The results shows that the IT risks culture and IT governance are weakly understood and implemented on those organizations, where there are not such an IT risk methodology formally defined, neither executed. In addition, most of practices suggested in the literature were found, even without an alignment with an IT risks management process

A Tecnologia da informação como fator de competitividade em um APL: o caso do APL da carcinicultura do RN

Este estudo aborda a utilização da tecnologia da informação de forma competitiva em um Arranjo Produtivo Local (APL). Realizou-se no APL da carcinicultura no Estado do Rio Grande do Norte e teve por objetivo buscar a compreensão de como o uso da tecnologia da informação (TI) contribui para o aumento da competitividade na atividade do APL citado. APL pode ser conceituado como uma aliança entre organizações que possuem um projeto coletivo, para elevar a sua competitividade e participação no mercado. Para atingir este objetivo, foi realizada uma pesquisa descritiva, através da utilização de múltiplos casos selecionados dentre as empresas que compõem o APL da carcinicultura no RN. Os dados coletados foram analisados qualitativamente. Os resultados da pesquisa indicaram que as empresas percebem a importância do uso da TI, mas que, na prática, a sua utilização é limitada, principalmente em se tratando de Sistemas Integrados de Gestão e Comércio Eletrônico. Outro resultado encontrado foi que as empresas, embora façam parte do APL, ainda não colaboram entre si, seja através da troca de informações, ou através de Sistemas de Informação Interorganizacional. As principais recomendações diante destes resultados é que as empresas atuem ativamente para o fortalecimento do APL. No que se refere ao uso da TI faz-se necessário que elas invistam na aquisição de sistemas integrados de gestão e sistemas de informação interorganizacional para o melhor gerenciamento das informações ao longo da cadeia

Análise webométrica das Universidades Públicas Federais das Regiões Norte e Centro- oeste do Brasil

VANTI, Nadia; SILVA, Lailde da. Análise webométrica das Universidades Públicas Federais das Regiões Norte e Centro- oeste do Brasil.In: ENCONTRO NACIONAL DE ESTUDANTES DE BIBLIOTECONOMIA, DOCUMENTAÇÃO, GESTÃO, E CIÊNCIA DA INFORMAÇÃO,33 , 2010, Paraíba. Anais... Paraíba: ENEBD, 2010.

A implementação de ações de integração na segurança pública: o caso das polícias civil e militar do Rio Grande do Norte

The research aimed to understand the challenges for the implementation of the proposed integration between the Civil Police and the Military Police in Rio Grande do Norte to the proposals of the SUSP. This study aimed to explore the gap with regard to the deepening of the possible causes that may hinder the implementation of integrated working between the police in public security, through a specific analysis on the state of Rio Grande do Norte. Was based on a theoretical framework that includes policies: general concepts, the steps of a public policy, the implementation stage , public security : conceptual definitions, policies on security in Brazil, the structure of public security in Brazil and systems police, Military Police x Civil Police: Roles and conflicts , integrating public security: the challenges to be overcome, the Unified public Safety (SUSP) and the main difficulties in the integration of the police. Being classified as to the purposes as an exploratory research on how to approach ranks as qualitative. The research unit was the Center for Integrated Operations Public Safety (CIOSP) through three subjects who were the chief CIOSP, the representative of the military police acting with the CIOSP, and representative civil police also active with the CIOSP. These subjects were chosen because of the understanding that individuals occupying senior positions would have more ability to respond to questions that guide the research problem. Data were collected through a set of interviews, qualitative data analysis was performed based content analysis, based on the definition of categories of analysis, gated time cross. With the results, it was revealed that the main problems of integration between the state police are treatment protocols, lack of political will and lack of infrastructure. The relationship between the Military Police and Civil Police in Rio Grande do Norte has differing cultural aspect, but can be considered as good value, professionalism and integrated operations. The implementation of CIOSP-RN followed the characteristics of the top-down model, the main difficulties in implementing the proposals of the SUSP, lack of own resources, the lack of standardization in public safety and the lack of professional training of public safety. It was concluded that with respect to the challenges to the implementation of the proposed integration between the Civil Police and the Military Police in Rio Grande do Norte to the proposals of the SUSP, the actions follow the characteristics of the top-down model, with no autonomy of administrators public to say in decisions, which restricts the view of the public safety of the state

Gestão documental da informação jurídica

Este artigo apresenta uma nova performance da gestão documental, voltada para o desenvolvimento das coleções no âmbito da informação jurídica, estabelecendo critérios de qualidade para os processos de seleção, aquisição e avaliação das informações. Para esse propósito, é feita uma avaliação das várias dimensões que permeiam a gestão documental da informação jurídica como um todo. A rapidez com que a informação jurídica se inova torna a literatura (ainda que recente) ultrapassada e obsoleta, ocasionando, assim, uma maior dificuldade das bibliotecas permanecerem com suas publicações sempre atualizadas. Por isso, é preciso que sejam elaborados mecanismos de controle e que seja efetuado um bom desenvolvimento dos serviços prestados pelas mesmas. Esses mecanismos são criados por meio da política de desenvolvimento de coleções, pois, quando bem fundamentada, assegura o bibliotecário na tomada de decisões, tanto em relação ao processo de seleção, aquisição e descarte do acervo,como na sustentação da qualidade na atualização da coleção. O processo de desenvolvimento da coleção é visto sob o viés da abordagem sistêmica das organizações.

Construção das capacidades organizacionais de tecnologia da informação no contexto dos sistemas institucionais integrados de gestão da UFRN

The IT capability is a organizational ability to perform activities of this role more effectively and an important mechanism in creating value. Its building process (stages of creation and development) occurs through management initiatives for improvement in the performance of their activities, using human resources and IT assets complementary responsible for the evolution of their organizational routines. This research deals with the IT capabilities related to SIG (integrated institutional management systems), built and deployed in UFRN (Universidade Federal do Rio Grande do Norte) to realization and control of administrative, academic and human resources activities. Since 2009, through cooperative agreements with federal and educational institutions of direct administration, UFRN has supported the implementation of these systems, currently involving more than 30 institutions. The present study aims to understand how IT capabilities, relevant in the design, implementation and dissemination of SIG, were built over time. This is a single case study of qualitative and longitudinal nature, performed by capturing, coding and analysis from secondary data and from semi-structured interviews conducted primarily with members of Superintenência de Informática, organizational unit responsible for SIG systems in UFRN. As a result, the technical, of internal relationship and external cooperation capabilities were identified as relevant in the successful trajectory of SIG systems, which have evolved in different ways. The technical capacity, initiated in 2004, toured the stages of creation and development until it reached the stage of stability in 2013, due to technological limits. Regarding the internal relationship capability, begun in 2006, it toured the stages of creation and development, having extended its scope of activities in 2009, being in development since then. Unlike the standard life cycle observed in the literature, the external cooperation capability was initiated by an intensity of initiatives and developments in the routines in 2009, which were decreasing to cease in 2013 in order to stabilize the technological infrastructure already created for cooperative institutions. It was still identified the start of cooperation in 2009 as an important event selection, responsible for changing or creating trajectories of evolution in all three capacities. The most frequent improvements initiatives were of organizational nature and the internal planning activity has been transformed over the routines of the three capabilities. Important resources and complementary assets have been identified as important for the realization of initiatives, such as human resources technical knowledge to the technical capabilities and external cooperation, and business knowledge, for all of them, as well as IT assets: the iproject application for control of development processes, and the document repository wiki. All these resources and complementary assets grew along the capacities, demonstrating its strategic value to SINFO/UFRN

Gestão da informação: um estudo de caso em um instituto de pesquisa tecnológica

Each two years the amount of available information in the world double. This is the Information Age, where the success depends on what one knows, not on what one has. A new economy appears with the capacity to generate, to store, to process and to apply effectively the knowledge, based on information, determining the companies productivity and competitiveness.The objective of this work is to understand the information management model of a technological research institute - CTGÁS (Gas Technology Center). The research has been done focused on the 5 main processes and the 15 support processes of the organization value chain , aiming to understand the information management in the organization based on Davenport´s Information Management model (1998). Therefore, it was necessary to identify how the necessary information for the organizational processes accomplishment are determined, obtained, distributed and used by the organization. The research can be classified as descriptive, regarding to its aims, and as a case study, related to the research ways. Interviews with the managers of the organization value chain processes have been carried through, with the objective to identify how they perceive the Information Management process that circulates in the organizational processes. Complementarily, a documentary research has been carried through, associated to the direct observation and procedures and actions follow up, involving the Information Management. The data treatment and analysis have been done from the authors theoretical support and from the managers interviews analysis, documents and processes observed by the researcher in the organization. It was noticed that the organization has raised its level of information needs that are not difficult to be determined and are satisfactorily obtained and distributed, although the majority of them are not structuralized, automatized or even classified regarding to its confidence. These peaces of information have good quality and are important, however they reflect a medium dependence on external and informal information, besides being used only in its great majority for people to know what and how to do something

A gestão da informação sob a luz do Enterprise Content Management (ECM): um estudo de caso em uma universidade pública

This work involves the organization and content perspectives on Enterprise Content Management (ECM) framework. The case study at the Federal University of Rio Grande do Norte was based on ECM model to analyse the information management provided by the three main administrative systems: The Integrated Management of Academic Activities (SIGAA), Integrated System of Inheritance, and Contracts Administration (SIPAC) and the Integrated System for Administration and Human Resources (SIGRH). A case study protocol was designed to provide greater reliability to research process. Four propositions were examined in order to reach the specific objectives of identification and evaluation of ECM components from UFRN perspective. The preliminary phase provided the guidelines for the data collection. In total, 75 individuals were interviewed. Interviews with four managers directly involved on systems design were recorded (average duration of 90 minutes). The 70 remaining individuals were approached in random way in UFRN s units, including teachers, administrative-technical employees and students. The results showed the presence of many ECM elements in the management of UFRN administrative information. The technological component with higher presence was "management of web content / collaboration". But initiatives of other components (e.g. email and document management) were found and are in continuous improvement. The assessment made use of eQual 4.0 to examine the effectiveness of applications under three factors: usability, quality of information and offered service. In general, the quality offered by the systems was very good and walk side by side with the obtained benefits of ECM strategy adoption in the context of the whole institution