Aspectos do gerenciamento de riscos de tecnologia da informação nas empresas: um estudo de caso múltiplos

The information technology - IT- benefits have been more perceived during the last decades. Both IT and business managers are dealing with subjects like governance, IT-Business alignment, information security and others on their top priorities. Talking about governance, specifically, managers are facing it with a technical approach, that gives emphasis on protection against invasions, antivirus systems, access controls and others technical issues. The IT risk management, commonly, is faced under this approach, that means, has its importance reduced and delegated to IT Departments. On the last two decades, a new IT risk management perspective raised, bringing an holistic view of IT risk to the organization. According to this new perspective, the strategies formulation process should take into account the IT risks. With the growing of IT dependence on most of organizations, the necessity of a better comprehension about the subject becomes more clear. This work shows a study in three public organizations of the Pernambuco State that investigates how those organizations manage their IT risks. Structured interviews were made with IT managers, and later, analyzed and compared with conceptual categories found in the literature. The results shows that the IT risks culture and IT governance are weakly understood and implemented on those organizations, where there are not such an IT risk methodology formally defined, neither executed. In addition, most of practices suggested in the literature were found, even without an alignment with an IT risks management process

Gerenciamento de alarmes em plataformas marítimas de produção de hidrocarbonetos: metodologia e estudo de caso

In the operational context of industrial processes, alarm, by definition, is a warning to the operator that an action with limited time to run is required, while the event is a change of state information, which does not require action by the operator, therefore should not be advertised, and only stored for analysis of maintenance, incidents and used for signaling / monitoring (EEMUA, 2007). However, alarms and events are often confused and improperly configured similarly by developers of automation systems. This practice results in a high amount of pseudo-alarms during the operation of industrial processes. The high number of alarms is a major obstacle to improving operational efficiency, making it difficult to identify problems and increasing the time to respond to abnormalities. The main consequences of this scenario are the increased risk to personal safety, facilities, environment deterioration and loss of production. The aim of this paper is to present a philosophy for setting up a system of supervision and control, developed with the aim of reducing the amount of pseudo-alarms and increase reliability of the information that the system provides. A real case study was conducted in the automation system of the offshore production of hydrocarbons from Petrobras in Rio Grande do Norte, in order to validate the application of this new methodology. The work followed the premises of the tool presented in ISA SP18.2. 2009, called "life cycle alarm . After the implementation of methodology there was a significant reduction in the number of alarms

Aspectos do gerenciamento de riscos de tecnologia da informação nas empresas: um estudo de caso múltiplos

The information technology - IT- benefits have been more perceived during the last decades. Both IT and business managers are dealing with subjects like governance, IT-Business alignment, information security and others on their top priorities. Talking about governance, specifically, managers are facing it with a technical approach, that gives emphasis on protection against invasions, antivirus systems, access controls and others technical issues. The IT risk management, commonly, is faced under this approach, that means, has its importance reduced and delegated to IT Departments. On the last two decades, a new IT risk management perspective raised, bringing an holistic view of IT risk to the organization. According to this new perspective, the strategies formulation process should take into account the IT risks. With the growing of IT dependence on most of organizations, the necessity of a better comprehension about the subject becomes more clear. This work shows a study in three public organizations of the Pernambuco State that investigates how those organizations manage their IT risks. Structured interviews were made with IT managers, and later, analyzed and compared with conceptual categories found in the literature. The results shows that the IT risks culture and IT governance are weakly understood and implemented on those organizations, where there are not such an IT risk methodology formally defined, neither executed. In addition, most of practices suggested in the literature were found, even without an alignment with an IT risks management process

Gerenciamento de alarmes em plataformas marítimas de produção de hidrocarbonetos: metodologia e estudo de caso

In the operational context of industrial processes, alarm, by definition, is a warning to the operator that an action with limited time to run is required, while the event is a change of state information, which does not require action by the operator, therefore should not be advertised, and only stored for analysis of maintenance, incidents and used for signaling / monitoring (EEMUA, 2007). However, alarms and events are often confused and improperly configured similarly by developers of automation systems. This practice results in a high amount of pseudo-alarms during the operation of industrial processes. The high number of alarms is a major obstacle to improving operational efficiency, making it difficult to identify problems and increasing the time to respond to abnormalities. The main consequences of this scenario are the increased risk to personal safety, facilities, environment deterioration and loss of production. The aim of this paper is to present a philosophy for setting up a system of supervision and control, developed with the aim of reducing the amount of pseudo-alarms and increase reliability of the information that the system provides. A real case study was conducted in the automation system of the offshore production of hydrocarbons from Petrobras in Rio Grande do Norte, in order to validate the application of this new methodology. The work followed the premises of the tool presented in ISA SP18.2. 2009, called "life cycle alarm . After the implementation of methodology there was a significant reduction in the number of alarms

LAUDMUS: rumo à implantação e gerenciamento de uma lista de audição musical online

SILVA, Alexandre Reche e. LAUDMUS: rumo à implantação e gerenciamento de uma lista de audição musical online. In: ENCONTRO REGIONAL DA ABEM NORDESTE (Associação Brasileira de Educação Musical), 9, Natal, RN, 2010. Anais eletronicos... Natal, RN, 2010.Trabalho Completo. Disponivel em: dex.php/abemnordeste2010/about>. Acesso em: 04 out. 2010.

O gerenciamento de impressões e a qualidade dos serviços nos hotéis da Paraíba

The present study has got as its aim to show how the impressions management is being used by the hotels in Paraiba State. For that, the dramma or role play perspective has been adopted as a model for service management. From the theater metaphor, the physical environment and its components can be seen as a scenery of the service show. We conduct the reader to notice the importance of the consummer about the service quality demand and its influence on his satisfaction. A methodology with exploring and qualifying nature has been adopted by using the analyses of content technique in interviews applied to hotel managers lebeled as having 4 and 5 stars in the State, trying to check how impression management takes place, identifying impression management tools used in relation to the physical evidences and to contacting people, as well as checking managers views in the survey about the use of impression management for client satisfaction make. The information revealed that managers, maybe for being unaware about impression management theory, haven t considered neither the physical evidences yet, nor contacting people as marketing tools. About the physical evidences, we could see that hotels take actions in a pulverized way referring to environment decoration and colors, however there isn t a global usage of physical evidences to highlight the service. Contacting people by their turn, receive better importance and attention. It was possible to make sure that managers are aware about the influence of the employee over the attendance quality. This way, we may come into a conclusion that impression management at Paraiba hotels has been under used, as long as managers seem to be, most times, turned to actions related to contacting people, not having realized the planning importance and national-wide use of service scenery in a genaral way yet

Avaliação da Política de Segurança Alimentar no Estado do Rio Grande do Norte viabilizada através dos Restaurantes Populares no aspecto de qualidade higiênico-sanitária

This survey has to general objective to evaluate the Food Safety Policy implemented by Restaurantes Populares do Rio Grande do Norte. The survey is qualitative of type exploratory and descriptive. The universe of survey is all Units of Food and Nutrition (UAN) of the Restaurantes Populares do Rio Grande do Norte. To collects of data were used two instruments: interview and form. The interviews were intended to analyze the four axes of the Food Safety: access, food quality, production and marketing of food and organizational arrangement. The form was used to check the quality of nutrition and sanitary-hygienic food served. We used two types of forms: a spreadsheet with the weekly menu and the portions served to verify that the meals serve the nutritional needs proposed by the program; and the check-list of ANVISA to verify the sanitary-hygienic conditions in each unit. Through the survey data and analyses made observe that the access category have some problems such as lack of registration, lack of advertising of Restaurants and wastage of public resources, making policy that should be of included in a policy of exclusion. In the nutritional aspect there is neglect on the daily nutritional goal, because it is not accomplished nutritional analysis of menu offered, the nutritionists do not know what should be the nutritional value of meals served; in the hygienic-health aspect trough the problems identified is concludes that there is no guarantee of food quality hygienic-sanitary, committing the program as a Food Safety Program. About the production and marketing of food is observed some problems as: the goal of sale of meals is not achieved in full, the purchase of genres does not stimulate the local economy, nor generates jobs and income, and inefficient performance of the MEIOS's supervision. In the analysis of organizational arrangement is concluded that the partnerships are beneficial, despite some negative points, therefore, are these partnerships the problems of non-compliance, as both the MEIOS and Nutriti of important criteria established in the partnership. Therefore, it is understood that the Programa Restaurantes Populares in its original formulation is proposed to be a food safety policy, but has some problems that impossible to meet its goal, making it unprofitable like Food Safety Policy

Fatores que influenciam a aceitação de práticas avançadas de gestão de segurança da informação: um estudo com gestores públicos estaduais no Brasil

This study examines the factors that influence public managers in the adoption of advanced practices related to Information Security Management. This research used, as the basis of assertions, Security Standard ISO 27001:2005 and theoretical model based on TAM (Technology Acceptance Model) from Venkatesh and Davis (2000). The method adopted was field research of national scope with participation of eighty public administrators from states of Brazil, all of them managers and planners of state governments. The approach was quantitative and research methods were descriptive statistics, factor analysis and multiple linear regression for data analysis. The survey results showed correlation between the constructs of the TAM model (ease of use, perceptions of value, attitude and intention to use) and agreement with the assertions made in accordance with ISO 27001, showing that these factors influence the managers in adoption of such practices. On the other independent variables of the model (organizational profile, demographic profile and managers behavior) no significant correlation was identified with the assertions of the same standard, witch means the need for expansion researches using such constructs. It is hoped that this study may contribute positively to the progress on discussions about Information Security Management, Adoption of Safety Standards and Technology Acceptance Model

Percepções de maturidade em gerenciamento de projetos à luz da nova gestão pública: uma investigação com gestores das secretarias estaduais do Rio Grande do Norte

This study aimed to measure the perception of maturity project management of state boards of Rio Grande do Norte by the perception of its managers. Argues that project management has been highlighted as a critical factor for the success of any organization, because the projects are directly related to the set of activities that result in organizational innovation as products, services and processes and the improvement of project management is directly aligned with the main pillars of the New Public Management. Methodologically, this is a quantitative research of a descriptive nature in which 161 forms were applied with coordinators and subcoordinators of state departments of Rio Grande do Norte, culminating in a sampling error of less than 6% to 95% confidence according to the procedures finite sampling. The process of tabulation and analysis was done using the package Statistical Package for Social Sciences - SPSS 18.0 and worked with techniques such as mean, standard deviation, frequency distributions, cluster analysis and factor analysis. The results indicate that the levels of maturity in project management in state departments of Rio Grande do Norte is below the national average and that behavioral skills are the main problem for improving management in these departments. It was possible to detect the existence of two groups of different perceptions about the management of projects, indicating, according to the managers, there are islands of excellence in project management in some sectors of the state departments. It was also observed that there are eight factors that affect maturity in project management: Planning and Control , Development of Management Skills , Project Management Environment , Acceptance of the Subject Project Management , Stimulus to Performance , Project Evaluation and Learning , Project Management Office and Visibility of Project Managers . It concludes that the project management in state departments of Rio Grande do Norte has no satisfactory levels of maturity in project management, affecting the levels of efficiency and effectiveness of the state apparatus, which shows that some of the assumptions that guide the New Public Management are not getting the levels of excellence nailed by this management model

Projeto café do trabalhador como promotor de segurança alimentar e nutricional: avaliação da eficácia da unidade Natal-RN

The evaluation of public policies that promote Food Security and Nutrition (FSN) it s a multidisciplinary activity extremely relevant to the effectiveness of actions to legitimize the Human Right to Adequate Food (HRAF). This study aimed at assessing the effectiveness of the unit project Natal-RN Café do Trabalhador in promoting SAN to its users. The theoretical framework is based on the public and political and on the dimensions of the concept of FSN (quantity and quality-regularity). Through a qualitative approach, methodologically this was the work of an evaluation of efficiency of the unit Natal-RN of Café do Trabalhador project in light of the assumptions of the concept of SAN. Data collection was conducted through retrospective archival research in official documents of the project, semi-structured interviews with managers involved in its implementation (representative of the Secretary of State for Employment, Housing and Care of RN SETHAS and third party), socioeconomic questionnaire applied to the users of the unit, check the amount, regularity and quality of meals offered for 15 days (menu routine) using the descriptive form menu and form filling type checklist for verification of compliance with good practices . Methods of analysis, we used content analysis, descriptive statistics and compared to previously established parameters for the project. As categories of analysis were defined organizational arrangement, access, user, food quantity-regularity and food quality. The results show that, it was found in the category arrangement that will implement the project dismissed technical criteria for choosing the districts and the quantitative distribution of meals for each location. It was found that the valuation of the shares of the company outsources technical SETHA has not been performed. We observed in the access category, the unit has a strategic location, but lack of space in the refectory. The main obstacle to economic access for users is the lack of a register for the beneficiaries. In the category of users, it was identified that the clientele of the project it is predominantly men, with more than 51 years, low education, earning wages less 1 obtained through informal employment, which they move up through the unit transport collective, go to all days of operation due primarily to price. About the meals category quantity-regularity of food showed that the menu serves 95% of the desired needs, and that holidays and weekends are periods of disrupting the regularity of supply of meals. Regarding the category of food quality, it was found that the nutritional aspect on the menu are food sources rich in sodium, nitrates and low in fiber. In the aspect of hygiene and sanitation are the main limitations related to waste management, lack of exposure controls of food prepared and inadequacies of the physical structure. The results showed that in general and the institutional arrangement of the organs attached to the project should establish a systematic evaluation project is to establish as a promoter of and FSN overcome these obstacles

Maturidade de escritório de gerenciamento de projetos: o caso do Ministério Público do Rio Grande do Norte

The research aimed to evaluate the level of maturity of the project management office of the Public Ministry of the State of Rio Grande do Norte, on the model PMO Maturity Cube. It was based on a theoretical framework that includes project management, project management office and maturity of the project management office. The research was classified as to the purpose as exploratory and descriptive. According to the methods used was a case study, and how to approach is qualitative and quantitative. The research unit was the prosecutor of the State of Rio Grande do Norte, by two guys who represent all of the participants in the project management office of the institution. These subjects were chosen because they act with the office since the foundation of the same, having the knowledge necessary to deepen the research required, and experience with projects and work experience in the area. Data were collected through an adaptation of the evaluation form for the amplitude corporate developed and presented to the scientific environment for Pinto, Cota and Levin (2010). The results revealed that the level of maturity in the current strategic approach is 77%, and 97% desired; tactical approach in current is 66% and 97% desired, and the current operational approach is 78%, and 100% desired. He pointed out that several factors influence the level of maturity of the project management office of the Public Prosecutor and the recurrent related to information technology, regarding the storage and sharing of information. Concluded that the level of maturity of the project management office of the Public Ministry of the State of Rio Grande do Norte is advanced

Sistemas de gerenciamento de bibliotecas: riscos decorrentes do processo de migração de dados

This work aims to analyze risks related to information technology (IT) in procedures related to data migration. This is done considering ALEPH, Integrated Libray System (ILS) that migrated data to the Library Module present in the software called Sistema Integrado de Gestão de Atividades Acadêmicas (SIGAA) at the Zila Mamede Central Library at the Federal University of Rio Grande do Norte (UFRN) in Natal/Brazil. The methodological procedure used was of a qualitative exploratory research with the realization of case study at the referred library in order to better understand this phenomenon. Data collection was able once there was use of a semi-structured interview that was applied with (11) subjects that are employed at the library as well as in the Technology Superintendence at UFRN. In order to examine data Content analysis as well as thematic review process was performed. After data migration the results of the interview were then linked to both analysis units and their system register with category correspondence. The main risks detected were: data destruction; data loss; data bank communication failure; user response delay; data inconsistency and duplicity. These elements point out implication and generate disorders that affect external and internal system users and lead to stress, work duplicity and hassles. Thus, some measures were taken related to risk management such as adequate planning, central management support, and pilot test simulations. For the advantages it has reduced of: risk, occurrence of problems and possible unforeseen costs, and allows achieving organizational objectives, among other. It is inferred therefore that the risks present in data bank conversion in libraries exist and some are predictable, however, it is seen that librarians do not know or ignore and are not very worried in the identification risks in data bank conversion, their acknowledge would minimize or even extinguish them. Another important aspect to consider is the existence of few empirical research that deal specifically with this subject and thus presenting the new of new approaches in order to promote better understanding of the matter in the corporate environment of the information units

A implementação de ações de integração na segurança pública: o caso das polícias civil e militar do Rio Grande do Norte

The research aimed to understand the challenges for the implementation of the proposed integration between the Civil Police and the Military Police in Rio Grande do Norte to the proposals of the SUSP. This study aimed to explore the gap with regard to the deepening of the possible causes that may hinder the implementation of integrated working between the police in public security, through a specific analysis on the state of Rio Grande do Norte. Was based on a theoretical framework that includes policies: general concepts, the steps of a public policy, the implementation stage , public security : conceptual definitions, policies on security in Brazil, the structure of public security in Brazil and systems police, Military Police x Civil Police: Roles and conflicts , integrating public security: the challenges to be overcome, the Unified public Safety (SUSP) and the main difficulties in the integration of the police. Being classified as to the purposes as an exploratory research on how to approach ranks as qualitative. The research unit was the Center for Integrated Operations Public Safety (CIOSP) through three subjects who were the chief CIOSP, the representative of the military police acting with the CIOSP, and representative civil police also active with the CIOSP. These subjects were chosen because of the understanding that individuals occupying senior positions would have more ability to respond to questions that guide the research problem. Data were collected through a set of interviews, qualitative data analysis was performed based content analysis, based on the definition of categories of analysis, gated time cross. With the results, it was revealed that the main problems of integration between the state police are treatment protocols, lack of political will and lack of infrastructure. The relationship between the Military Police and Civil Police in Rio Grande do Norte has differing cultural aspect, but can be considered as good value, professionalism and integrated operations. The implementation of CIOSP-RN followed the characteristics of the top-down model, the main difficulties in implementing the proposals of the SUSP, lack of own resources, the lack of standardization in public safety and the lack of professional training of public safety. It was concluded that with respect to the challenges to the implementation of the proposed integration between the Civil Police and the Military Police in Rio Grande do Norte to the proposals of the SUSP, the actions follow the characteristics of the top-down model, with no autonomy of administrators public to say in decisions, which restricts the view of the public safety of the state

Fatores críticos de sucesso para sistemas de informação de apoio ao gerenciamento de projetos: o caso SEBRAE/RN

Universidade Federal do Rio Grande do Norte

Arquitetura da (in)segurança: estudando relações entre configuração espacial, artifícios de segurança e violência urbana no bairro Manaíra, João Pessoa, Paraíba

João Pessoa, the capital city of the state of Paraíba (Northeast Brazil), is reputed throughout the country as a quiet place, although it has been acquiring, over the past years, an urban character with social implications similar to those of major metropolitan Brazilian areas. The new situation is evident by the social inequalities, with the creation of confined spaces, which segregate and cause enclosure of the inhabitants, leading to death the public space. This study correlates accessibility in spatial structure with two types of crime data, burglary and robbery, recorded in 2008 and 2009, by the Secretaria de Segurança da Paraíba (The government agency public in charge of safety), in the district of Manaíra, an upper middle class neighborhood, which has, in recent times, been considered one of the most violent areas in João Pessoa. Sought to understand connections between these events and morpho-social aspects of the built environment, where examined the spatial properties, such as accessibility of the urban net, the presence of control measures, the safety of buildings and their uses. Spatial properties were also validated by the observation of pedestrian flows at strategic points of the study area. It was concluded that the presence of intense flows helps to attract potential thieves, physical security and control offers little protection