PUPSI :uma proposta de processo unificado para políticas de segurança da informação

The way to deal with information assets means nowadays the main factor not only for the success but also for keeping the companies in the global world. The number of information security incidents has grown for the last years. The establishment of information security policies that search to keep the security requirements of assets in the desired degrees is the major priority for the companies. This dissertation suggests a unified process for elaboration, maintenance and development of information security policies, the Processo Unificado para Políticas de Segurança da Informação - PUPSI. The elaboration of this proposal started with the construction of a structure of knowledge based on documents and official rules, published in the last two decades, about security policies and information security. It's a model based on the examined documents which defines the needed security policies to be established in the organization, its work flow and identifies the sequence of hierarchy among them. It's also made a model of the entities participating in the process. Being the problem treated by the model so complex, which involves all security policies that the company must have. PUPSI has an interative and developing approach. This approach was obtained from the instantiation of the RUP - Rational Unified Process model. RUP is a platform for software development object oriented, of Rational Software (IBM group). Which uses the best practice known by the market. PUPSI got from RUP a structure of process that offers functionality, diffusion capacity and comprehension, performance and agility for the process adjustment, offering yet capacity of adjustment to technological and structural charges of the market and the company

Tratamento técnico informacional de discos sonoros: uma abordagem voltata para a análise, representação e organização de acervos musicais

Aborda o tratamento técnico informacional de discos sonoros na Biblioteca Especializada em Música Pe. Jaime Diniz, da Universidade Federal do Rio Grande do Norte. Caracteriza os discos sonoros enquanto suporte informacional. Relata as dificuldades encontradas no processo de tratamento da informação musical em materiais especiais. Objetiva estabelecer diretrizes para a análise, representação e organização do acervo de discos sonoros. Utiliza a pesquisa bibliográfica em fontes impressas e eletrônicas para o suporte teórico, tendo como metodologia o estudo de caso. Conclui que as regras e padrões para o tratamento técnico da informação no campo da Biblioteconomia podem sofrer adaptações para melhor representar o conteúdo musical dos discos sonoros, considerando a necessidade do profissional da informação em aperfeiçoar seus conhecimentos em música.

Lugar, saúde e informação: os círculos de informação da atenção básica do SUS no contexto na disputa pelo conceito de saúde

Through the analysis of the informational activity at the primary care of SUS at the scale of places, this dissertation has as central objective to observe the dispute for the concepts of health and sickness, in the ambit of Brazilian Health Movement, featuring, on one hand, the clinic, biomedical or flexnerian line hegemonic, scientifically restrict and the primary frame of references for the Brazilian health politics and on the other hand a multiplicity of new proposals and critic thoughts to the current model, which have , as common characteristic, the worry with a territorial way of thinking the health context, therefore beyond the biological processes. On the first chapter we jut out with details these scientific and ideological movements, on a wider way, but also on the specificities of the public health s information politics. On the second chapter we analyze the downward health information circle at the basic care, observing the operational processes of the information s technical systems SIAB and e-SUS. On the third and last chapter, we give references to think about an upward health information circle, centered on the places, ruled by the notions of autonomy, organic solidarity and communicational density. It would possess, as method s primary horizon, the local organization of production and managing of information through the work of the Health Community Agent, privileging therefore the urgency of the most contingent needs of the people in theirs every day s life

Fatores que influenciam a predisposição dos usuários em aderir a uma política de segurança da informação

The information constitutes one of the most valuable strategic assets for the organization. However, the organizational environment in which it is inserted is very complex and heterogeneous, making emerging issues relevant to the Governance of information technology (IT) and Information Security. Academic Studies and market surveys indicate that the origin of most accidents with the information assets is the behavior of people organization itself rather than external attacks. Taking as a basis the promotion of a culture of safety among users and ensuring the protection of information in their properties of confidentiality, integrity and availability, organizations must establish its Information Security Policy (PSI). This policy is to formalise the guidelines in relation to the security of corporate information resources, in order to avoid that the asset vulnerabilities are exploited by threats and can bring negative consequences to the business. But, for the PSI being effective, it is required that the user have readiness to accept and follow the procedures and safety standards. In the light of this context, the present study aims to investigate what are the motivators extrinsic and intrinsic that affect the willingness of the user to be in accordance with the organization's security policies. The theoretical framework addresses issues related to IT Governance, Information Security, Theory of deterrence, Motivation and Behavior Pro-social. It was created a theoretical model based on the studies of Herath and Rao (2009) and D'Arcy, Hovav and Galletta (2009) that are based on General Deterrence Theory and propose the following influencing factors in compliance with the Policy: Severity of Punishment, Certainty of Detection, Peer Behaviour, Normative Beliefs, Perceived Effectiveness and Moral Commitment. The research used a quantitative approach, descriptive. The data were collected through a questionnaire with 18 variables with a Likert scale of five points representing the influencing factors proposed by the theory. The sample was composed of 391 students entering the courses from the Center for Applied Social Sciences of the Universidade Federal do Rio Grande do Norte. For the data analysis, were adopted the techniques of Exploratory Factor Analysis, Analysis of Cluster hierarchical and nonhierarchical, Logistic Regression and Multiple Linear Regression. As main results, it is noteworthy that the factor severity of punishment is what contributes the most to the theoretical model and also influences the division of the sample between users more predisposed and less prone. As practical implication, the research model applied allows organizations to provide users less prone and, with them, to carry out actions of awareness and training directed and write Security Policies more effective.

Práticas e características do jornalismo alternativo e contra hegemônico de agência de informação: uma visão a partir da rotina produtiva da Adital

The strong presence of the communication and information technologies (TICs) forced the productive routine of some media vehicles to go through significant changes. The same happened to the alternative agencies segment. Having a scarce literature and sources about this subject, this study’s objective is to understand how the Information Agency Frei Tito for Latin America (Adital) develops its proposal of alternative journalism, within the cyberspace, while aiming a Christian communication. For this finality, the study will describe and explain the practices of journalistic production, identifying the subjects involved and the relations maintained between them in this productive routine. Also, it will trace who and where these content replicators are and/or their online address. At first, it was presented a theoretical discussion about the concepts of “counter-hegemony”, alternative journalism and communicative citizenship, what brings us to the studies of Gramsci (2010), Peruzzo (2011), Moraes (2013), Paiva (2008), Coutinho (2008), Mata (2006), among other authors. Next, it will be approached briefly the historical path of the information agencies around the world and in Latin America, so that the study can focus on authors like Aguiar (2009), Pasti (2013) and Moraes (2010). This piece will draught a “methodologic route” for a qualitative approach with an exploratory and descriptive character. We gave up the etnometodological methods, what allow us to analyze the etnomethods or behavioral groups of action, procedures, activities and knowledge that constitutes these groups, giving them recognition and distinction. (COULON, 1995). To achieve the defined objectives, it was also used a bibliographical and documental research techniques, in addition to subject observation and semi-structured interviews. Finally, we analyze the collected data taking into consideration three pivots: the beginning of Adital; the practices, characteristics and subjects involved in the productive routine of the agency; and who are and where are these content replicators of content produced and transmitted by Adital. We can conclude that the production routine of an alternative agency and the counter-hegemonic of information is marked by some singularities regarding to the organization of the journalistic practice and to the obstacles found on the way. Our data allows us, even if there are still some doubts, to believe that Adital is a sort of independent information agency, alternative and counter-hegemonic, ergo, more close to a proposition of communicative citizenship.

Práticas e características do jornalismo alternativo e contra hegemônico de agência de informação: uma visão a partir da rotina produtiva da Adital

The strong presence of the communication and information technologies (TICs) forced the productive routine of some media vehicles to go through significant changes. The same happened to the alternative agencies segment. Having a scarce literature and sources about this subject, this study’s objective is to understand how the Information Agency Frei Tito for Latin America (Adital) develops its proposal of alternative journalism, within the cyberspace, while aiming a Christian communication. For this finality, the study will describe and explain the practices of journalistic production, identifying the subjects involved and the relations maintained between them in this productive routine. Also, it will trace who and where these content replicators are and/or their online address. At first, it was presented a theoretical discussion about the concepts of “counter-hegemony”, alternative journalism and communicative citizenship, what brings us to the studies of Gramsci (2010), Peruzzo (2011), Moraes (2013), Paiva (2008), Coutinho (2008), Mata (2006), among other authors. Next, it will be approached briefly the historical path of the information agencies around the world and in Latin America, so that the study can focus on authors like Aguiar (2009), Pasti (2013) and Moraes (2010). This piece will draught a “methodologic route” for a qualitative approach with an exploratory and descriptive character. We gave up the etnometodological methods, what allow us to analyze the etnomethods or behavioral groups of action, procedures, activities and knowledge that constitutes these groups, giving them recognition and distinction. (COULON, 1995). To achieve the defined objectives, it was also used a bibliographical and documental research techniques, in addition to subject observation and semi-structured interviews. Finally, we analyze the collected data taking into consideration three pivots: the beginning of Adital; the practices, characteristics and subjects involved in the productive routine of the agency; and who are and where are these content replicators of content produced and transmitted by Adital. We can conclude that the production routine of an alternative agency and the counter-hegemonic of information is marked by some singularities regarding to the organization of the journalistic practice and to the obstacles found on the way. Our data allows us, even if there are still some doubts, to believe that Adital is a sort of independent information agency, alternative and counter-hegemonic, ergo, more close to a proposition of communicative citizenship.

A digitalização do acervo do núcleo temático da seca da UFRN como possibilidade de socialização da informação

CARVALHO, Monica Marques; CARVALHO, Luciana Moreira; FREIRE, I.M. A digitalizaçao do acervo do nucleo tematico da seca da UFRN como possibilidade de socializaçao da informaçao. Interface, v.1, n.1, 2004.Disponivel em: http://www.ccsa.ufrn.br/interface/1-1/artigos.htm. Acesso em: 04 nov.2010.

Organização e tratamento do acervo de instrumentos musicais: o caso da Instrumentoteca da Escola de Música da Universidade Federal do Rio Grande do Norte

Analisa os processos para organização e tratamento do acervo de instrumentos musicais no âmbito da Instrumentoteca da Escola de Música da Universidade Federal do Rio Grande do Norte. Discorre o conceito de biblioteca especializada, suas características e finalidades. Procura verificar os procedimentos utilizados pela Instrumentoteca quanto à organização do acervo, identifica regras para representação descritiva de instrumentos musicais, tendo como parâmetro o Código Anglo-americano de Catalogação. Exemplifica a representação descritiva e de conteúdo de instrumentos musicais; sugere medidas que venham facilitar o processo de organização e acondicionamento dos instrumentos musicais. Utiliza como metodologia o estudo de caso , tendo como suporte teórico a pesquisa bibliográfica em fontes impressas e eletrônicas . Conclui mostrando a melhor maneira de organizar coleções de instrumentos musicais por meio do Código Anglo-americano de Catalogação, e enfatiza que essas regras podem ser aplicadas para organizar diferentes tipos de suporte de informação.

Gestão da informação: um estudo de caso em um instituto de pesquisa tecnológica

Each two years the amount of available information in the world double. This is the Information Age, where the success depends on what one knows, not on what one has. A new economy appears with the capacity to generate, to store, to process and to apply effectively the knowledge, based on information, determining the companies productivity and competitiveness.The objective of this work is to understand the information management model of a technological research institute - CTGÁS (Gas Technology Center). The research has been done focused on the 5 main processes and the 15 support processes of the organization value chain , aiming to understand the information management in the organization based on Davenport´s Information Management model (1998). Therefore, it was necessary to identify how the necessary information for the organizational processes accomplishment are determined, obtained, distributed and used by the organization. The research can be classified as descriptive, regarding to its aims, and as a case study, related to the research ways. Interviews with the managers of the organization value chain processes have been carried through, with the objective to identify how they perceive the Information Management process that circulates in the organizational processes. Complementarily, a documentary research has been carried through, associated to the direct observation and procedures and actions follow up, involving the Information Management. The data treatment and analysis have been done from the authors theoretical support and from the managers interviews analysis, documents and processes observed by the researcher in the organization. It was noticed that the organization has raised its level of information needs that are not difficult to be determined and are satisfactorily obtained and distributed, although the majority of them are not structuralized, automatized or even classified regarding to its confidence. These peaces of information have good quality and are important, however they reflect a medium dependence on external and informal information, besides being used only in its great majority for people to know what and how to do something

A gestão da informação sob a luz do Enterprise Content Management (ECM): um estudo de caso em uma universidade pública

This work involves the organization and content perspectives on Enterprise Content Management (ECM) framework. The case study at the Federal University of Rio Grande do Norte was based on ECM model to analyse the information management provided by the three main administrative systems: The Integrated Management of Academic Activities (SIGAA), Integrated System of Inheritance, and Contracts Administration (SIPAC) and the Integrated System for Administration and Human Resources (SIGRH). A case study protocol was designed to provide greater reliability to research process. Four propositions were examined in order to reach the specific objectives of identification and evaluation of ECM components from UFRN perspective. The preliminary phase provided the guidelines for the data collection. In total, 75 individuals were interviewed. Interviews with four managers directly involved on systems design were recorded (average duration of 90 minutes). The 70 remaining individuals were approached in random way in UFRN s units, including teachers, administrative-technical employees and students. The results showed the presence of many ECM elements in the management of UFRN administrative information. The technological component with higher presence was "management of web content / collaboration". But initiatives of other components (e.g. email and document management) were found and are in continuous improvement. The assessment made use of eQual 4.0 to examine the effectiveness of applications under three factors: usability, quality of information and offered service. In general, the quality offered by the systems was very good and walk side by side with the obtained benefits of ECM strategy adoption in the context of the whole institution

A influência do processo de terceirização de tecnologia da informação na utilização dos modelos de contratação de serviços: um estudo de casos múltiplos

The change in the economic world and the emergence of Internet as a tool for communication and integration among the markets have forced organizations to adopt a different structure, process-oriented with a focus on information management. Thus, information technology has gained prominence in the organizational context, increasing its complexity and range of services provided by this function. Moreover, outsourcing has become an important model for flexible corporate structure, helping organizations to achieve better results when carrying out their activities and processes and be more competitive. To make the IT outsourcing, it is necessary to follow certain steps that range from strategic assessment to the management of outsourced service. Such steps can influence the form of contracting services, varying the types of service providers and contractors. Thus, the study aimed to identify how this IT outsourcing process influences the use of models for contracting services. For this, a study was conducted in multiple cases study involving two companies in Rio Grande do Norte State, specifically the health sector. Data collection was carried out with the CIOs of the companies surveyed through semi-structured interviews. According to the results obtained, it was found that the outsourcing process more structured influences the use of a more advanced contracting model. However, there are features found in these steps carrying more clearly this influence, as the goals pursued by outsourcing, the criteria used in selecting the supplier, a contract negotiation, how to transition services and the use of methods management, but can vary depending on the level of maturity in the relationship of the companies examined. Moreover, it was found that the use of contracting model may also influence how it is developed the IT outsourcing process, requiring or not its more formalized and organization

Aspectos do gerenciamento de riscos de tecnologia da informação nas empresas: um estudo de caso múltiplos

The information technology - IT- benefits have been more perceived during the last decades. Both IT and business managers are dealing with subjects like governance, IT-Business alignment, information security and others on their top priorities. Talking about governance, specifically, managers are facing it with a technical approach, that gives emphasis on protection against invasions, antivirus systems, access controls and others technical issues. The IT risk management, commonly, is faced under this approach, that means, has its importance reduced and delegated to IT Departments. On the last two decades, a new IT risk management perspective raised, bringing an holistic view of IT risk to the organization. According to this new perspective, the strategies formulation process should take into account the IT risks. With the growing of IT dependence on most of organizations, the necessity of a better comprehension about the subject becomes more clear. This work shows a study in three public organizations of the Pernambuco State that investigates how those organizations manage their IT risks. Structured interviews were made with IT managers, and later, analyzed and compared with conceptual categories found in the literature. The results shows that the IT risks culture and IT governance are weakly understood and implemented on those organizations, where there are not such an IT risk methodology formally defined, neither executed. In addition, most of practices suggested in the literature were found, even without an alignment with an IT risks management process

Fatores críticos de sucesso para sistemas de informação de apoio ao gerenciamento de projetos: o caso SEBRAE/RN

Universidade Federal do Rio Grande do Norte

Processo de implantação de um sistema integrado de gestão em uma organização pública à luz da teoria da hospitalidade :um estudo de caso

In the present time, public organizations are employing more and more solutions that uses information technology in order to ofer more transparency and better services for all citizens. Integrated Systems are IT which carry in their kernel features of integration and the use of a unique database. These systems bring several benefits and face some obstacles that make their adoption difficult. The conversion to a integrated system may take years and, thus, the study of the adoption of this IT in public sector organizations become very stimulant due to some peculiarities of this sector and the features of this technology. First of all, information about the particular integrated system in study and about its process of conversion are offered. Then, the researcher designs the configuration of the conversion process aim of this study the agents envolved and the moments and the tools used to support the process in order to elaborate the methodology of the conversion process understood as the set of procedures and tools used during all the conversion process. After this, the researcher points out, together with all the members of the conversion team, the negative and positive factors during the project. Finally, these factors were analysed through the Hospitality Theory lens which, in the researcher opinion, was very useful to understand the elements, events and moments that interfered in the project. The results consolidated empirically the Hospitality Theory presumptions, showing yet a limitation of this theory in the case in study