Segurança da informação no correio eletrônico com base na ISO/IEC 17799 :um estudo de caso em uma instituição superior com foco no treinamento

The electronic mail service is one of the most Internet services that grow in the corporate environment. This evolution is bringing several problems for the organizations, especially to information that circulates inside of the corporate net. The lack of correct orientation to the people, about the usage and the security importance of these resources, is leaving breaches and causing misusage and overuse of service, for example. In recent literature, it starts to coming out several ideas, which has helped to rganizations how to plain and how to implement the information security system to the electronic mail in computer environment. However, these ideas are still not placed in practice in many companies, public or private. This dissertation tries to demonstrate the results of a research that has like goal, identify the importance that user training has over the information security policy, through a case study inside of private superior education institute in this state. Besides, this work had by basic orientation the ISO/IEC 17799, which talk about People Security. This study was developed over a proposed model to this research, which looked for offer conditions to guide the institution studied, how to plan better a information security policy to the electronic mail. Also, this research has an exploratory and descreptive nature and your type, qualitative. Firstly, it was applied na questionary to the information technology manager, as better way to get some general data and to deepen the contact which still then, it was being kept through e-mail. Thereupon this first contact, eleven interviews were done with the same manager, beside one interview with twenty-four users, among employees e students. After that to collect and transcript the interviews, were review with the manager all informations given, to correct any mistakes and to update that informations, to then, start the data analyze. The research suggests that the institution has a pro attitude about the information security policy and the electronic mail usage. However, it was clear that answers have their perception about information security under a very inexperient way, derived of a planning lack in relation to training program capable to solve the problem

Relações entre mídia e lazer:o capitalismo, os meios e a apropriação do tempo livre nas sociedades industrial e pós-industrial

This research aims to understand the relationship between media, capitalism and ownership of free time for leisure practices in industrial societies and postindustrial. Searching is thus a conceptual framework that takes into account the kind of ideology that naturalizes the relationship of leisure with the foundations of contemporary media, and the media only with leisure, forgetting their insertion in the labor and industrial relations in society. We intend to demonstrate that every mode of production, in the capitalist system, entails a mode of reproduction. Methodologically, this is a first approximation, from theoretical concerns already performed, constituting a theoretical research, bibliographic and descriptive character. The results of the text drives us to the conclusion that the work and leisure spheres tend to be less and less differentiated, since both remain as activities of product management with the same intellective protocols, based on information and communication technology, and that accordingly, the media favors an expansion of productive activity even during leisure time

Filosofar em tempos de informação

This thesis reflects upon the question of how does philosophy think a particular today, which is not only a legitimate philosophical task but a determinative characteristic of philosophy in general. Today's thought follows two paths: first, an hermeneutical-phenomenological analysis of Martin Heidegger's thought with regards to his own contemporaneity; and secondly, through the analysis of the contemporary phenomenon of Information Technology which in the present work is to be considered a privileged sign of our times and distinctive of the mindfulness of philosophy. Therefore, the starting point is an investigation of Heidegger's thinking on his own era to whom facticity is a way of accessing the fundamental question of philosophy. This thesis is led by three guiding words which hold onto a perspective of unity in Heidegger s lifetime of work: 1. Technicity, 2. History, 3. Language, to thereby develop a characterization of human existence as 1. Technopolitical, 2. Technoscientific, and 3. Technological. Finally, in keeping with this triangular characterization of the human, a philosophical comprehension of our times will be established and drawn by Information Technology illustrating three of its' factual signs that are understood to be the 'Remains of Being' today: The Emptying of Speech (Language); The Emptying of Science (History); The Emptying of The Object (Technicity). Through these nowadays phenomenon, it is possible to maintain a grip on the fundamental question, precisely when the task of philosophy seems to have peremptorily lost its meaning and come to its logical end and to show how philosophizing in the information era is as possible as it is necessary.

Educação física e televisão: reflexões sobre sensibilidade, tecnologia e conhecimento

Este estudo parte do princípio de que o conhecimento da Educação Física é, eminentemente, vivencial e reconhece que a tecnologia da informação, especifi camente a comunicação de massa, é capaz de transmitir informação para um grande público, modifi cando a vivência das práticas corporais tematizadas pela Educação Física. Nesse sentido, esta pesquisa objetiva analisar como o aparato tecnológico, em especial a televisão, interfere na apropriação do conhecimento na Educação Física, com base na refl exão sobre o esporte. Assim, utilizamos o olhar estético sobre o telespetáculo esportivo e a análise de conteúdo para trabalhar com discursos de profi ssionais. Além disso, apontamos para a revisão de alguns conceitos pertinentes à área, tais como corpo, sensibilidade e conhecimento

Fatores que influenciam a predisposição dos usuários em aderir a uma política de segurança da informação

The information constitutes one of the most valuable strategic assets for the organization. However, the organizational environment in which it is inserted is very complex and heterogeneous, making emerging issues relevant to the Governance of information technology (IT) and Information Security. Academic Studies and market surveys indicate that the origin of most accidents with the information assets is the behavior of people organization itself rather than external attacks. Taking as a basis the promotion of a culture of safety among users and ensuring the protection of information in their properties of confidentiality, integrity and availability, organizations must establish its Information Security Policy (PSI). This policy is to formalise the guidelines in relation to the security of corporate information resources, in order to avoid that the asset vulnerabilities are exploited by threats and can bring negative consequences to the business. But, for the PSI being effective, it is required that the user have readiness to accept and follow the procedures and safety standards. In the light of this context, the present study aims to investigate what are the motivators extrinsic and intrinsic that affect the willingness of the user to be in accordance with the organization's security policies. The theoretical framework addresses issues related to IT Governance, Information Security, Theory of deterrence, Motivation and Behavior Pro-social. It was created a theoretical model based on the studies of Herath and Rao (2009) and D'Arcy, Hovav and Galletta (2009) that are based on General Deterrence Theory and propose the following influencing factors in compliance with the Policy: Severity of Punishment, Certainty of Detection, Peer Behaviour, Normative Beliefs, Perceived Effectiveness and Moral Commitment. The research used a quantitative approach, descriptive. The data were collected through a questionnaire with 18 variables with a Likert scale of five points representing the influencing factors proposed by the theory. The sample was composed of 391 students entering the courses from the Center for Applied Social Sciences of the Universidade Federal do Rio Grande do Norte. For the data analysis, were adopted the techniques of Exploratory Factor Analysis, Analysis of Cluster hierarchical and nonhierarchical, Logistic Regression and Multiple Linear Regression. As main results, it is noteworthy that the factor severity of punishment is what contributes the most to the theoretical model and also influences the division of the sample between users more predisposed and less prone. As practical implication, the research model applied allows organizations to provide users less prone and, with them, to carry out actions of awareness and training directed and write Security Policies more effective.

O paradigma tecnológico e a revolução informacional: fundamentos da sociedade da informação

REGIS, Josiana Florencio Vieira; CAMPOS, Ana Celia Cavalcanti Fernandes. O paradigma tecnologico e a revoluçao informacional: fundamentos da sociedade da informaçao. In: CONGRESSO INTERNACIONAL EM SISTEMAS DE INFORMAÇAO E GESTAO DA TECNOLOGIA, 6., 2009. Sao Paulo. Anais eletronicos... Sao Paulo: FEA/USP, 2009. Trabalho oral.

TECNOLOGITecnologia da informação: commodity ou ferramenta estratégica?

RAMOS, A. S. M. ; FERREIRA, L. B. . Tecnologia da informação: Commodity ou Ferramenta Estratégica?. Revista de Gestão da Tecnologia e Sistemas de Informação , USP, São Paulo, v. 2, n. 1, p. 69-79, 2005.

As Bibliotecas Universitárias de Portugal e Nordeste do Brasil: estudo sobre o impacto e mediação das tecnologias digitais

Analisa as práticas de mediação desenvolvidas nas bibliotecas universitárias pelos bibliotecários diante das tecnologias digitais. Para tanto estabelece como objetivo geral analisar de forma comparativa, o impacto e mediação das tecnologias digitais no funcionamento de bibliotecas Universitárias de Portugal e da região Nordeste do Brasil. Integraram esta pesquisa 10 universidades federais brasileiras e 12 universidades públicas portuguesas, com um total geral de 115 bibliotecários, que são os sujeitos participantes. É uma pesquisa qualitativa que adota o método quadripolar – recomendado para os trabalhos desenvolvidos no âmbito das Ciências Sociais Aplicadas, e em especial na área de Ciência da Informação. Através da interação entre os polos: epistemológico, teórico, técnico e morfológico, que fundamentam este método, houve o fortalecimento e a fluidez das questões estudadas. Os resultados dos questionários aplicados aos bibliotecários, bem como da análise dos sítios das bibliotecas pesquisadas, foram interpretados através de um alicerce teórico baseado em três pontos principais: as questões paradigmáticas que envolvem a área de Ciência da Informação, a análise da mediação pós-custodial informacional e científica e as Tecnologias de Informação e Comunicação presentes nas bibliotecas. Como principais resultados vemos que o impacto das tecnologias digitais nas bibliotecas universitárias é considerado pelos bibliotecários brasileiros e portugueses como positivo, com ênfase em dois pontos: a inovação dos suportes de informação e a autossuficiência dos utilizadores. A maior diferença se percebe em relação ao aspecto social, através de uma maior preocupação entre os bibliotecários brasileiros com as barreiras informacionais causadas por questões econômica, social e educacional e sentido com menos intensidade pelos bibliotecários portugueses, que ascendem as tecnologias digitais com mais facilidade. De forma conclusiva, a análise do impacto e a mediação das tecnologias digitais nas bibliotecas pesquisadas, apontam para uma evolução nas práticas mediadoras das bibliotecas universitárias de Portugal e do Nordeste do Brasil e uma convergência laboral entre os bibliotecários portugueses e brasileiros.

Impactos da adoção de sistemas de informação no judiciário: pesquisa com usuários do sistema processual virtual em um juizado especial federal

The Information Technology (IT) is increasing his applicability to business, both private and public companies. It is necessary the adequate use of the new technologies and get cooperation and technology acceptance of the system. People tend to resist to the changes, contributing so that the technology is rejected or even it is not recognized as promoting of the changes. This study is relevant and aim to evaluate the impacts of new technologies, considering their users as fundamental factors in the change process. The survey analyzed the advantages and the barriers of the system use in three federal special judicial of Rio Grande do Norte, with data collected in May of 2007, through the application of questionnaires to thirty eight users of the virtual system CRETA. The users' perception was evaluated, under the optics of five variables: efficiency, image, agility, ease of use and quality. Starting from the obtained results, it was evidenced that the implementation of the system felt accordingly the expected and it reached the objectives intended that were: the velocity and efficiency in the path of the lawsuits, larger productivity, resulting in a better quality of the final work introduced to the citizen and proportionate an improvement in the organizational image of the judiciary power

Fatores críticos de sucesso como antecedentes da aceitação de um sistema de informação em uma universidade federal

In recent decades the public sector comes under pressure in order to improve its performance. The use of Information Technology (IT) has been a tool increasingly used in reaching that goal. Thus, it has become an important issue in public organizations, particularly in institutions of higher education, determine which factors influence the acceptance and use of technology, impacting on the success of its implementation and the desired organizational results. The Technology Acceptance Model - TAM was used as the basis for this study and is based on the constructs perceived usefulness and perceived ease of use. However, when it comes to integrated management systems due to the complexity of its implementation,organizational factors were added to thus seek further explanation of the acceptance of such systems. Thus, added to the model five TAM constructs related to critical success factors in implementing ERP systems, they are: support of top management, communication, training, cooperation, and technological complexity (BUENO and SALMERON, 2008). Based on the foregoing, launches the following research problem: What factors influence the acceptance and use of SIE / module academic at the Federal University of Para, from the users' perception of teachers and technicians? The purpose of this study was to identify the influence of organizational factors, and behavioral antecedents of behavioral intention to use the SIE / module academic UFPA in the perspective of teachers and technical users. This is applied research, exploratory and descriptive, quantitative with the implementation of a survey, and data collection occurred through a structured questionnaire applied to a sample of 229 teachers and 30 technical and administrative staff. Data analysis was carried out through descriptive statistics and structural equation modeling with the technique of partial least squares (PLS). Effected primarily to assess the measurement model, which were verified reliability, convergent and discriminant validity for all indicators and constructs. Then the structural model was analyzed using the bootstrap resampling technique like. In assessing statistical significance, all hypotheses were supported. The coefficient of determination (R ²) was high or average in five of the six endogenous variables, so the model explains 47.3% of the variation in behavioral intention. It is noteworthy that among the antecedents of behavioral intention (BI) analyzed in this study, perceived usefulness is the variable that has a greater effect on behavioral intention, followed by ease of use (PEU) and attitude (AT). Among the organizational aspects (critical success factors) studied technological complexity (TC) and training (ERT) were those with greatest effect on behavioral intention to use, although these effects were lower than those produced by behavioral factors (originating from TAM). It is pointed out further that the support of senior management (TMS) showed, among all variables, the least effect on the intention to use (BI) and was followed by communications (COM) and cooperation (CO), which exert a low effect on behavioral intention (BI). Therefore, as other studies on the TAM constructs were adequate for the present research. Thus, the study contributed towards proving evidence that the Technology Acceptance Model can be applied to predict the acceptance of integrated management systems, even in public. Keywords: Technology

Crenças normativas e comportamentais e suas influências na intenção de adoção de um sistema de informação: um estudo na área de compras da UFPA

The study aims to identify the factors that influence the behavior intention to adopt an academic Information System (SIE), in an environment of mandatory use, applied in the procurement process at the Federal University of Pará (UFPA). For this, it was used a model of innovation adoption and technology acceptance (TAM), focused in attitudes and intentions regarding the behavior intention. The research was conducted a quantitative survey, through survey in a sample of 96 administrative staff of the researched institution. For data analysis, it was used structural equation modeling (SEM), using the partial least squares method (Partial Least Square PLS-PM). As to results, the constructs attitude and subjective norms were confirmed as strong predictors of behavioral intention in a pre-adoption stage. Despite the use of SIE is required, the perceived voluntariness also predicts the behavior intention. Regarding attitude, classical variables of TAM, like as ease of use and perceived usefulness, appear as the main influence of attitude towards the system. It is hoped that the results of this study may provide subsidies for more efficient management of the process of implementing systems and information technologies, particularly in public universities

Fatores inibidores à adoção de tecnologias de informação em micro e pequenas empresas fornecedoras da vale no estado do Pará

Universidade Estadual do Rio Grande do Norte

Sistemas de gerenciamento de bibliotecas: riscos decorrentes do processo de migração de dados

This work aims to analyze risks related to information technology (IT) in procedures related to data migration. This is done considering ALEPH, Integrated Libray System (ILS) that migrated data to the Library Module present in the software called Sistema Integrado de Gestão de Atividades Acadêmicas (SIGAA) at the Zila Mamede Central Library at the Federal University of Rio Grande do Norte (UFRN) in Natal/Brazil. The methodological procedure used was of a qualitative exploratory research with the realization of case study at the referred library in order to better understand this phenomenon. Data collection was able once there was use of a semi-structured interview that was applied with (11) subjects that are employed at the library as well as in the Technology Superintendence at UFRN. In order to examine data Content analysis as well as thematic review process was performed. After data migration the results of the interview were then linked to both analysis units and their system register with category correspondence. The main risks detected were: data destruction; data loss; data bank communication failure; user response delay; data inconsistency and duplicity. These elements point out implication and generate disorders that affect external and internal system users and lead to stress, work duplicity and hassles. Thus, some measures were taken related to risk management such as adequate planning, central management support, and pilot test simulations. For the advantages it has reduced of: risk, occurrence of problems and possible unforeseen costs, and allows achieving organizational objectives, among other. It is inferred therefore that the risks present in data bank conversion in libraries exist and some are predictable, however, it is seen that librarians do not know or ignore and are not very worried in the identification risks in data bank conversion, their acknowledge would minimize or even extinguish them. Another important aspect to consider is the existence of few empirical research that deal specifically with this subject and thus presenting the new of new approaches in order to promote better understanding of the matter in the corporate environment of the information units

Arquitetura empresarial: um estudo de caso sobre a integração entre a plataforma moodle e o sigaa na UFRN

Atualmente, um dos aspectos da gestão da informação que se encontra em evidência é o da arquitetura empresarial, entendida como o conjunto de políticas e escolhas técnicas de padronização e integração para viabilizar as estratégias de negócios da organização. Esta pesquisa tem por objetivo analisar a integração de dois sistemas de gestão na Universidade Federal do Rio Grande do Norte (UFRN) a partir das lentes da arquitetura empresarial. A influência dessa abordagem induz a organização a desenvolver um alicerce de execução com o interesse de suportar com maior eficiência sua estratégia e obter agilidade em seus processos de negócio. A análise da integração desses dois sistemas, através de entrevistas semiestruturadas, no âmbito da UFRN possibilitou a percepção da necessidade de uma estruturação dos processos de TI a partir de uma arquitetura que favoreça um melhor alinhamento das capacidades de TI aos objetivos da organização. A ausência de um modelo operacional pode comprometer a eficiência do Sistema Integrado de Gestão das Atividades Acadêmicas (SIGAA) da UFRN na realização do seu objetivo como plataforma única de gestão das informações da universidade

Analise das melhores práticas em business process management: estudo de casos em organizações hospitalares de Natal/RN

O gerenciamento dos processos organizacionais vem sendo estudado pela ciência administrativa como forma de romper com o paradigma da estrutura organizacional funcional através da Gestão por Processos. O Business Process Management ( BPM alinhado às estratégias organizacionais e suportado cada vez mais pela Tecnologia da Informação (TI), proporciona clareza nas diversas pontas do processo colaborando para sua melhoria contínua com o objetivo de gerar valor agregado ao cliente. As organizações de saúde estão entre as empresas prestadoras de serviço pouco estudadas em relação ao gerenciamento por processos. Assim, este estudo analisou por meio de um estudo empírico de natureza qualitativa, como estão sendo conduzidos os processos organizacionais hospitalares à luz das melhores práticas em BPM. A pesquisa foi realizada através do estudo de casos múltiplos realizados em duas organizações hospitalares na cidade de Natal/RN. A literatura de referência apresentou diversos fatores para um desempenho otimizado em BPM, tratados nesta pesquisa como as melhores práticas em BPM. A partir da revisão da literatura foi elaborada uma síntese das melhores práticas de BPM que serviu de base para elaboração do modelo da pesquisa utilizado para coleta e análise dos dados. Este modelo indicou onze categorias que foram utilizadas para elaboração do roteiro de estrevistas semi-estruturadas, através da técnica de análise de conteúdo, com categorização de grade fechada. As categorias foram agrupadas em duas dimensões: Elementos relacionados à gestão ( governança ; liderança , alinhamento estratégico , cultura e conhecimento ) e elementos relacionados aos processos ( desenho , responsável , executores , tecnologia da informação e indicadores ), e ainda foi identificada uma terceira categoria: escritório de processos . Para seleção dos sujeitos desta pesquisa foi adotada a estratégia em cadeia ou bola de neve . Foi possível identificar que todas as categorias apontadas no modelo de pesquisa emergem entre os fatores buscados pelas organizações hospitalares para o gerenciamento por processos com destaque para categorias: cultura ; conhecimento ; desenho ; tecnologia da informação e indicadores . Em complemento às categorias de análise, foram identificadas dificuldades relacionadas à comunicação e integração dos diversos elos do processo. Além disso, constatou-se que nos hospitais investigados há um desvio do conceito de BPM no que diz respeito a seu objetivo final: agregar valor ao cliente. A pesquisa concluiu que o gerenciamento por processos nas organizações hospitalares investigadas encontra-se em fase inicial ou em desenvolvimento, sendo necessário superar as barreiras da comunicação e edificar uma cultura organizacional orientada às necessidades dos clientes para aplicação das melhores práticas de BPM, desta forma pesquisas futuras sobre este tema em outras organizações hospitalares, podem facilitar um estudo comparativo e ampliar o conhecimento no assunto