Aspectos do gerenciamento de riscos de tecnologia da informação nas empresas: um estudo de caso múltiplos

The information technology - IT- benefits have been more perceived during the last decades. Both IT and business managers are dealing with subjects like governance, IT-Business alignment, information security and others on their top priorities. Talking about governance, specifically, managers are facing it with a technical approach, that gives emphasis on protection against invasions, antivirus systems, access controls and others technical issues. The IT risk management, commonly, is faced under this approach, that means, has its importance reduced and delegated to IT Departments. On the last two decades, a new IT risk management perspective raised, bringing an holistic view of IT risk to the organization. According to this new perspective, the strategies formulation process should take into account the IT risks. With the growing of IT dependence on most of organizations, the necessity of a better comprehension about the subject becomes more clear. This work shows a study in three public organizations of the Pernambuco State that investigates how those organizations manage their IT risks. Structured interviews were made with IT managers, and later, analyzed and compared with conceptual categories found in the literature. The results shows that the IT risks culture and IT governance are weakly understood and implemented on those organizations, where there are not such an IT risk methodology formally defined, neither executed. In addition, most of practices suggested in the literature were found, even without an alignment with an IT risks management process

Fatores influenciadores da implementação de ações de gestão de segurança da informação :um estudo com executivos e gerentes de tecnologia da informação das empresas do Rio Grande do Norte

Information is one of the most valuable organization s assets, mainly on a global and highly competitive world. On this scenery there are two antagonists forces: on one side, organizations struggle for keeping protected its information, specially those considered as strategic, on the other side, the invaders, leaded by innumerous reasons - such as hobby, challenge or one single protest with the intention of capturing and corrupting the information of other organizations. This thesis presents the descriptive results of one research that had as its main objective to identify which variables influence the Executives´ and CIOs´ perceptions toward Information Security. In addition, the research also identified the profile of Rio Grande do Norte s organizations and its Executives/CIOs concerning Information Security, computed the level of agreement of the respondents according to NBR ISO/IEC 17799 (Information technology Code of practice for information security management) on its dimension Access Control. The research was based on a model, which took into account the following variables: origin of the organization s capital, sector of production, number of PCs networked, number of employees with rights to network, number of attacks suffered by the organizations, respondent´s positions, education level, literacy on Information Technology and specific training on network. In the goal´s point of view, the research was classified as exploratory and descriptive, and, in relation of the approach, quantitative. One questionnaire was applied on 33 Executives and CIOs of the 50 Rio Grande do Norte s organizations that collected the highest taxes of ICMS - Imposto sobre Circulação de Mercadorias on 2000. After the data collecting, cluster analysis and chi-square statistical tools were used for data analysis. The research made clear that the Executives and CIOs of Rio Grande do Norte s organizations have low level of agreement concerning the rules of the NBR ISO/IEC 17799. It also made evident that the Executives and CIOs have its perception toward Information Security influenced by the number of PCs networked and by the number of attacks suffered by the organizations

Group Sequential Communication (GSC): Especificação e Análise de Desempenho de umMecanismo de Comunicação de Tempo Real Compatível ao Padrão IEEE 802.11/11e Aplicado à Automação Industrial

This thesis proposes the specification and performance analysis of a real-time communication mechanism for IEEE 802.11/11e standard. This approach is called Group Sequential Communication (GSC). The GSC has a better performance for dealing with small data packets when compared to the HCCA mechanism by adopting a decentralized medium access control using a publish/subscribe communication scheme. The main objective of the thesis is the HCCA overhead reduction of the Polling, ACK and QoS Null frames exchanged between the Hybrid Coordinator and the polled stations. The GSC eliminates the polling scheme used by HCCA scheduling algorithm by using a Virtual Token Passing procedure among members of the real-time group to whom a high-priority and sequential access to communication medium is granted. In order to improve the reliability of the mechanism proposed into a noisy channel, it is presented an error recovery scheme called second chance algorithm. This scheme is based on block acknowledgment strategy where there is a possibility of retransmitting when missing real-time messages. Thus, the GSC mechanism maintains the real-time traffic across many IEEE 802.11/11e devices, optimized bandwidth usage and minimal delay variation for data packets in the wireless network. For validation purpose of the communication scheme, the GSC and HCCA mechanisms have been implemented in network simulation software developed in C/C++ and their performance results were compared. The experiments show the efficiency of the GSC mechanism, especially in industrial communication scenarios.

Um serviço de certificação digital para plataformas de middleware

Nowadays due to the security vulnerability of distributed systems, it is needed mechanisms to guarantee the security requirements of distributed objects communications. Middleware Platforms component integration platforms provide security functions that typically offer services for auditing, for guarantee messages protection, authentication, and access control. In order to support these functions, middleware platforms use digital certificates that are provided and managed by external entities. However, most middleware platforms do not define requirements to get, to maintain, to validate and to delegate digital certificates. In addition, most digital certification systems use X.509 certificates that are complex and have a lot of attributes. In order to address these problems, this work proposes a digital certification generic service for middleware platforms. This service provides flexibility via the joint use of public key certificates, to implement the authentication function, and attributes certificates to the authorization function. It also supports delegation. Certificate based access control is transparent for objects. The proposed service defines the digital certificate format, the store and retrieval system, certificate validation and support for delegation. In order to validate the proposed architecture, this work presents the implementation of the digital certification service for the CORBA middleware platform and a case study that illustrates the service functionalities

Comitês de Classificadores para o Reconhecimento Multibiométrico em Dados Biométricos Revogáveis

This work discusses the application of techniques of ensembles in multimodal recognition systems development in revocable biometrics. Biometric systems are the future identification techniques and user access control and a proof of this is the constant increases of such systems in current society. However, there is still much advancement to be developed, mainly with regard to the accuracy, security and processing time of such systems. In the search for developing more efficient techniques, the multimodal systems and the use of revocable biometrics are promising, and can model many of the problems involved in traditional biometric recognition. A multimodal system is characterized by combining different techniques of biometric security and overcome many limitations, how: failures in the extraction or processing the dataset. Among the various possibilities to develop a multimodal system, the use of ensembles is a subject quite promising, motivated by performance and flexibility that they are demonstrating over the years, in its many applications. Givin emphasis in relation to safety, one of the biggest problems found is that the biometrics is permanently related with the user and the fact of cannot be changed if compromised. However, this problem has been solved by techniques known as revocable biometrics, which consists of applying a transformation on the biometric data in order to protect the unique characteristics, making its cancellation and replacement. In order to contribute to this important subject, this work compares the performance of individual classifiers methods, as well as the set of classifiers, in the context of the original data and the biometric space transformed by different functions. Another factor to be highlighted is the use of Genetic Algorithms (GA) in different parts of the systems, seeking to further maximize their eficiency. One of the motivations of this development is to evaluate the gain that maximized ensembles systems by different GA can bring to the data in the transformed space. Another relevant factor is to generate revocable systems even more eficient by combining two or more functions of transformations, demonstrating that is possible to extract information of a similar standard through applying different transformation functions. With all this, it is clear the importance of revocable biometrics, ensembles and GA in the development of more eficient biometric systems, something that is increasingly important in the present day

Aspectos do gerenciamento de riscos de tecnologia da informação nas empresas: um estudo de caso múltiplos

The information technology - IT- benefits have been more perceived during the last decades. Both IT and business managers are dealing with subjects like governance, IT-Business alignment, information security and others on their top priorities. Talking about governance, specifically, managers are facing it with a technical approach, that gives emphasis on protection against invasions, antivirus systems, access controls and others technical issues. The IT risk management, commonly, is faced under this approach, that means, has its importance reduced and delegated to IT Departments. On the last two decades, a new IT risk management perspective raised, bringing an holistic view of IT risk to the organization. According to this new perspective, the strategies formulation process should take into account the IT risks. With the growing of IT dependence on most of organizations, the necessity of a better comprehension about the subject becomes more clear. This work shows a study in three public organizations of the Pernambuco State that investigates how those organizations manage their IT risks. Structured interviews were made with IT managers, and later, analyzed and compared with conceptual categories found in the literature. The results shows that the IT risks culture and IT governance are weakly understood and implemented on those organizations, where there are not such an IT risk methodology formally defined, neither executed. In addition, most of practices suggested in the literature were found, even without an alignment with an IT risks management process

Povoações, freguesias e vilas na Paraíba Colonial: Pombal e Sousa, 1697-1800

The towns presently named Pombal and Sousa, located in the hinterland of the State of Paraíba, Brazil, still keep vestiges of the colonization process they went through along the 18th and 19th centuries, when they both emerged as settlement nuclei in the extreme West of the then captaincy of Paraíba and attained the status of freguesia and vila in a later period. This research aims to comprehend the process of urban formation and development of the colonial urban nuclei of Pombal and Sousa as they became povoados (hamlets), freguesias (parishes) and vilas (small urban communities with a local government), according to territorial expansion policies implemented by the Portuguese government from 1697 to 1800. The choice of the two urban settlements for this survey lies in the fact that they were part of the great conquest and colonization program undertaken by the Portuguese Crown. Another aspect that was considered was the fact that those towns are the oldest urban nuclei of Paraíba s hinterland. They came into being as early as in the times of the colony, thus producing a favorable environment to the study of the changes that occurred in the captaincy s hinterland scenery resulting from the process of formation and development of the colonial urban space. Three fundamental categories of analysis were defined since they have a direct bearing upon the urban configuration of the two colonization nuclei: povoado, freguesia and vila. The three of them are related to civil and ecclesiastic jurisdictions. Field, documentation and bibliography surveys were undertaken in order to develop the study. They allowed for the finding of vestiges of the old, colonial urban structures and for the development of theoretical analysis based on present-day studies of issues relating to the colonial urban history. The study purposes were, therefore, to try to understand how the old urban nuclei of Pombal and Sousa fit in the territorial expansion policies undertaken by the Portuguese government; to relate the process of urban formation and development of such nuclei with the categories of analysis povoação-freguesia-vila by discussing the relations and influences they exert over one another and their territory, as well as to unveil, as much as possible, the configuration the urban spaces that were shaped along the 18th century

O Insituto do Amicus Curiae no controle de consitucionalide brasileiro: uma abordagem à luz da efetividade do princípio do acesso à justiça

It presents a study about the control of constitutionality, its requirements and beddings. It brings, at first, notions about the concept of constitution, in its most varied aspects, as well as the systems of Control of Constitutionality. It emphasizes, considering the actual Brazilian situation, which passes through constitutional reforms and, therefore, assenting the appearance of an enormous amount of ordinary laws, the legal instability that has formed itself within the national panoram. Because of this situation, the institute of the Control of Constitutionality gains inmportancy as a way of protection of our Great Letter, against possible violations which can unfortunately happen. More ahead in the difuse control of constitutionality argues the new trend of generalization, especially after the recent reform that introduced the general repercussion as new requirement of admissibilidade of the appeal to the Brazilian Supreme Court. In the final chapter brings an analysis on the institute of amicus curiae, arguing its historical origins and its evolution, in the comparative jurisprudence, and the Brazilian right. From then is gone deep the paper of amicus curiae in the constitutionality control and, after quarrel on the difficulties of the Brazilian population to materialize its right before the judiciary, as this new institute could contribute in basic way for the materialization of the constitutional rule of access to justice

Povoações, freguesias e vilas na Paraíba Colonial: Pombal e Sousa, 1697-1800

The towns presently named Pombal and Sousa, located in the hinterland of the State of Paraíba, Brazil, still keep vestiges of the colonization process they went through along the 18th and 19th centuries, when they both emerged as settlement nuclei in the extreme West of the then captaincy of Paraíba and attained the status of freguesia and vila in a later period. This research aims to comprehend the process of urban formation and development of the colonial urban nuclei of Pombal and Sousa as they became povoados (hamlets), freguesias (parishes) and vilas (small urban communities with a local government), according to territorial expansion policies implemented by the Portuguese government from 1697 to 1800. The choice of the two urban settlements for this survey lies in the fact that they were part of the great conquest and colonization program undertaken by the Portuguese Crown. Another aspect that was considered was the fact that those towns are the oldest urban nuclei of Paraíba s hinterland. They came into being as early as in the times of the colony, thus producing a favorable environment to the study of the changes that occurred in the captaincy s hinterland scenery resulting from the process of formation and development of the colonial urban space. Three fundamental categories of analysis were defined since they have a direct bearing upon the urban configuration of the two colonization nuclei: povoado, freguesia and vila. The three of them are related to civil and ecclesiastic jurisdictions. Field, documentation and bibliography surveys were undertaken in order to develop the study. They allowed for the finding of vestiges of the old, colonial urban structures and for the development of theoretical analysis based on present-day studies of issues relating to the colonial urban history. The study purposes were, therefore, to try to understand how the old urban nuclei of Pombal and Sousa fit in the territorial expansion policies undertaken by the Portuguese government; to relate the process of urban formation and development of such nuclei with the categories of analysis povoação-freguesia-vila by discussing the relations and influences they exert over one another and their territory, as well as to unveil, as much as possible, the configuration the urban spaces that were shaped along the 18th century

Controle social do espaço público: uma análise do conselho turístico pólo costa das dunas

The managing Conselho of public politics constitute one of the main experiences of democracy in Brazil contemporary representing a conquest for construction of a democratic institutionalism. The historical newness consists of the intensification and the institutionalization of the dialogue between government and society - in public and plural canals - as condition for an allocation more efficient joust and of the public resources. In this context the present study it objectified to understand from readings of the performance of represented group of bencheses the dynamics of functioning of the Tourist Conselho Pólo Costa das Dunas while space of participation and social control. The bibliographical research contemplated diverse sources in order to compile knowledge of credential authors in the quarrel of inherent subjects to the civil society and the public sphere to the construction of the citizenship to the conception formation and dynamics of the social control through Conselho of public politics. A qualitative perspective the case study was adopted as research method and for attainment of the data interviews with the members of the Conselho had been carried through beyond consultation the referring documents the dynamics of functioning of the Conselho. The profiles capacities and limitations of the members of the Conselho had been identified constitution social and dynamic organization of functioning of the Conselho and the readings of the members of the Conselho concerning the power to decide instances and participation. The results had shown that the allotment of being able in the Conselho does not occur of equal form. The functions of coordination of the activities of the Conselho are assumed by the representatives of the public agencies. Level of qualification of council members also if presents as difficulty to development of activities of Conselho since the majority of the interviewed ones disclosed unreliability and unfamiliarity when thematic specific that runs away from its organizacional reality they are boarded in the assemblies. Of this form the Conselho if presents more as half of institutional legitimation of what half of characterization of the creation of a public sphere properly said. Finally he could himself be concluded that a democratic culture inexists that inside crosses practical the institutional ones of the Conselho thus limiting the possibility to reach the effective social control of the public politics of tourism in the Rio Grande do Norte

A ouvidoria pública como instrumento de controle das ações da Secretaria de Saúde do Pará

The State and Public Administration have gone through several reforms in search of a quick operation and the provision of services with quality. With the democratization of the country and the issue of the Constitution in 1988, further reform of the State and Public Administration, joined the government agenda in 1995 and included among its objectives, the principles of participation and social control. In view of this, it raises the Public Ombudsman in order to be a channel for the participation of users in the management of public affairs, social control, transparency of administrative actions, improving the quality of service and meeting the needs of the community. The aim of this study is to assess whether the Ombudsman of the State Department of Public Health to contribute to the period 2006-2008, for the improvement of specialized consulting services. The research is characterized as descriptive, qualitative approach. The collection technique used was the interview, conducted with 37 service users and two servants of the Ombudsman. The analysis was developed based on the perception of users and servers in the opinion of the Ombudsman. The most relevant results of the research showed that 41% of users search the Ombudsman because they believed that solve the problem presented. However, even with this level of public acceptance, the Ombudsman reached average index of resolvability of 53% in the period. In his role has not developed mechanisms for quality control of services, which is mentioned by 67% of users. It turned out the same fact in relation to popular participation, which is confirmed by 84% of users. For 24% of users, the problems raised were resolved, and of these, 56% believe that the Ombudsman has contributed to the positive outcome. As a result of the search results, it appears that the Ombudsman's SESPA / PA, is not fulfilling its role to ensuring the democratization of articipation in management, social control and has limited contribution to solving the problems of users and to improve the quality of services

Vigilância eletrônica no trabalho bancário: do controle consentido ao totalitarismo corporativo

This dissertation addresses the electronic surveillance theme in the banking context. The research that originated it, which was held in an organization called for the fiction name Banco Total, started from the following driving question: How do workers at a bank perceive electronic surveillance at their process of work? The research s main objective was to comprehend how workers perceive electronic surveillance at their process of work. The study adopted an interdisciplinary perspective, having Management as the original field, establishing a dialogue with others disciplines, like Philosophy and Sociology. About its methodology, it s a qualitative research that addressed its object in oral (interviews with live history elements) way. . Ten individuals were interviewed. The analytical process utilized the hermeneutical-dialectics technique.. From the analyses (hermeneutics) of the data, the following themes have emerged: (i) Acquiescence ; (ii) Monitoring; (iii) Time and Motion; (iv) Fear; (v) Interdiction; and (vi) Resistance . From the discussion (dialectic) of the results, this work presents three synthetic propositions that culminate in the following dimensions (i) control; (ii) acquiescence; (iii) corporative totalitarianism. It can be concluded that electronic surveillance is one mechanism of control emerged from the apply of technology at Total Bank; that information technology has been improving the control mechanisms of management theories; and that the imbrications between management and material technology control mechanisms at a context where there is acquiescence by workers contribute for the emergency of corporative totalitarianism components

Sobre (vivência) e mortalidade de pequenos negócios: o caso de mercados varejistas potiguares

This paper‟s starting point was the objective of understanding the relation between the reasons pointed out by small businesses owners for the continuity or shutdown of their businesses, and the reasons presented by the Environmental Theories. The paper discusses the Environmental Theories understand that it is supported by a systemic metaphor speech, discussing the theme in terms of organizational survival and mortality . The text reviews the literature showing the changes in the administrative thinking regarding the organization versus environment relation, and presenting general ideas about the micro and small businesses. In methodological terms, the qualitative approach was used in the research. Regarding the data collection technique, an in-depth thematic interview was used. It was carried out considering the elements of the techniques of life history and oral history, always giving priority to real world related narratives told by the interviewed subjects. The empirical corpus of the research was made up of seven owners of small retail businesses in two Potiguar cities: Natal and Mossoró. The interpretative and analytical process focused, at first, on the reflexive dialogue with each one of the owners‟ professional life history and business management experience, constituting the first level of analysis: reflections on individual narratives; and, afterwards, the interpretative process was developed through the analysis of all the subjects‟ statements, identifying the recurring themes and constituting the second level of analysis: reflection on the totalizing narrative. The themes identified in the totalizing narrative, that refer to the continuity of the businesses are: evolution, control, fidelity, liking what one does for a living. The themes that came up as reasons for shutdown are: lack of empathy with the business, lack of evolution, competition problems, suppliers and the government. The text synthesizes its comprehensions affirming that the reasons associated with continuity and shutdown of small markets, for this group of owners specifically, come up as a permanent tension between the volunteerism (quite human) and the determinism (systemic). The tension is shown in testimonies that at the same time evoke the organicist systemic logic through the themes evolution/no evolution, and also counterpoints with themes related to the interested human action, based on desires, feelings and personal convictions such as: liking what one does/ lack of empathy. As for the reflexive dialogue between the postulates of the Environmental Theories and the narratives, the results make it possible to affirm that, differently from the tension expressed by the subjects while talking about their reasons, the reasons associated with survival and mortality of businesses according to the Environmental Theories are theoretically polarized, seeming to preach options that are stagnated and shaping towards the subjects involved in the organization-environment relation

Relações entre mecanismos de coordenação e controle com desempenho organizacional: um estudo nas instituições públicas de ensino médio de Natal

This research aimed at relating coordination and control forms to organizational performance. The multicase study was applied in two public high schools: Centro Federal de Educação Tecnológica do Rio Grande do Norte and Floriano Cavalcanti. In order to accomplish these objectives, it was developed a qualitative analysis and considered coordination and control forms of several authors. Also was considered Sander´s (1984) model of organizational performance. The mentioned model considers two criteria to analyze organizational performance: one instrumental (efficiency and efficacy) and other substantive (effectiveness e relevance). The research attempts to show the importance of balancing these criteria in a way that effectiveness and relevance becomes more important at schools. It was proven that the use of bureaucratic coordination forms has the power to influence the evaluation on the instrumental technique. At the same time, it was observed that the use of mechanisms based on the autonomy of the school is related to efficiency and efficacy. The object of this research can be considered successful

Caminhos que estruturam cidades: redes técnicas de transporte sobre trilhos e a conformação intra-urbana de Natal

The railroad, from 1870 and on, becomes an usual complaining in the press s and politician elite s speeches, especially because of Natal s geographic isolation. The implantation of two railroads in the capital territory Estrada de Ferro de Natal a Nova Cruz, afterwards part of Great Western Railway Company network, and Estrada de Ferro Central do Rio Grande do Norte had serious implications in the urban environment. While railroad s structures were already consolidated, other transportation mechanisms were being implanted in the first decades of the 20th century, such as trams lines, which, by the way, was a transport modal that also used rails as a dislocation meaning. Considering these questions, we may ask: how come railroads and tramways demands, roads and buildings had influenced the internal organization of Natal? We work with the general hypothesis that the influence of technical networks, composed by tramways and railroads, over Natal s urban space happened in a diversified way, sometimes consolidating social aspects in certain areas, sometimes improving the occupation of others. The impact over the city s territory also happens in a diversified way between the buildings/railroad s complexes and the pathways. The different scale of the train in comparison to the trams velocity, size, noise level, flow, among others is also a cause to the different consequences in urban environment. The main objective of this work is to understand the role of circulation technical networks in the construction process of urban space in Natal, as a way to contribute to the urban historiography about the subject. The time frame adopted, between 1881 and 1937, marks the time path of railroads and tramways in Rio Grande do Norte: 1881 is the year of railroad s first section inauguration from Natal to São José do Mipibu as well of the railroad complex in the Republic Square in Natal; the year of 1937 marks the beginning of tramways declination process in the city. At this time railroads and tramways had to face more intensively the competition of motor vehicles. The theory reference adopted is based on concepts and analysis of authors, such as Flávio Villaça and Roberto Lobato Corrêa references to the concepts of urban structure , localization and accessibility and Gabriel Dupuy to explain the concept of urban technical networks . These references reveal the conflict of different realities in the urban universe interests and values which is an important factor about the construction of urban space. The information sources used were from two distinctive natures: primary, journals of the time studied and official government reports, and secondary, based on other works about the subject. It was also used by this study iconographic source, especially images from the data base of the research group História da Cidade, do Território e do Urbanismo .