Aspectos do gerenciamento de riscos de tecnologia da informação nas empresas: um estudo de caso múltiplos

The information technology - IT- benefits have been more perceived during the last decades. Both IT and business managers are dealing with subjects like governance, IT-Business alignment, information security and others on their top priorities. Talking about governance, specifically, managers are facing it with a technical approach, that gives emphasis on protection against invasions, antivirus systems, access controls and others technical issues. The IT risk management, commonly, is faced under this approach, that means, has its importance reduced and delegated to IT Departments. On the last two decades, a new IT risk management perspective raised, bringing an holistic view of IT risk to the organization. According to this new perspective, the strategies formulation process should take into account the IT risks. With the growing of IT dependence on most of organizations, the necessity of a better comprehension about the subject becomes more clear. This work shows a study in three public organizations of the Pernambuco State that investigates how those organizations manage their IT risks. Structured interviews were made with IT managers, and later, analyzed and compared with conceptual categories found in the literature. The results shows that the IT risks culture and IT governance are weakly understood and implemented on those organizations, where there are not such an IT risk methodology formally defined, neither executed. In addition, most of practices suggested in the literature were found, even without an alignment with an IT risks management process

Fatores influenciadores da implementação de ações de gestão de segurança da informação :um estudo com executivos e gerentes de tecnologia da informação das empresas do Rio Grande do Norte

Information is one of the most valuable organization s assets, mainly on a global and highly competitive world. On this scenery there are two antagonists forces: on one side, organizations struggle for keeping protected its information, specially those considered as strategic, on the other side, the invaders, leaded by innumerous reasons - such as hobby, challenge or one single protest with the intention of capturing and corrupting the information of other organizations. This thesis presents the descriptive results of one research that had as its main objective to identify which variables influence the Executives´ and CIOs´ perceptions toward Information Security. In addition, the research also identified the profile of Rio Grande do Norte s organizations and its Executives/CIOs concerning Information Security, computed the level of agreement of the respondents according to NBR ISO/IEC 17799 (Information technology Code of practice for information security management) on its dimension Access Control. The research was based on a model, which took into account the following variables: origin of the organization s capital, sector of production, number of PCs networked, number of employees with rights to network, number of attacks suffered by the organizations, respondent´s positions, education level, literacy on Information Technology and specific training on network. In the goal´s point of view, the research was classified as exploratory and descriptive, and, in relation of the approach, quantitative. One questionnaire was applied on 33 Executives and CIOs of the 50 Rio Grande do Norte s organizations that collected the highest taxes of ICMS - Imposto sobre Circulação de Mercadorias on 2000. After the data collecting, cluster analysis and chi-square statistical tools were used for data analysis. The research made clear that the Executives and CIOs of Rio Grande do Norte s organizations have low level of agreement concerning the rules of the NBR ISO/IEC 17799. It also made evident that the Executives and CIOs have its perception toward Information Security influenced by the number of PCs networked and by the number of attacks suffered by the organizations

Aspectos do gerenciamento de riscos de tecnologia da informação nas empresas: um estudo de caso múltiplos

The information technology - IT- benefits have been more perceived during the last decades. Both IT and business managers are dealing with subjects like governance, IT-Business alignment, information security and others on their top priorities. Talking about governance, specifically, managers are facing it with a technical approach, that gives emphasis on protection against invasions, antivirus systems, access controls and others technical issues. The IT risk management, commonly, is faced under this approach, that means, has its importance reduced and delegated to IT Departments. On the last two decades, a new IT risk management perspective raised, bringing an holistic view of IT risk to the organization. According to this new perspective, the strategies formulation process should take into account the IT risks. With the growing of IT dependence on most of organizations, the necessity of a better comprehension about the subject becomes more clear. This work shows a study in three public organizations of the Pernambuco State that investigates how those organizations manage their IT risks. Structured interviews were made with IT managers, and later, analyzed and compared with conceptual categories found in the literature. The results shows that the IT risks culture and IT governance are weakly understood and implemented on those organizations, where there are not such an IT risk methodology formally defined, neither executed. In addition, most of practices suggested in the literature were found, even without an alignment with an IT risks management process

Práticas de governança de tecnologia da informação: um estudo de caso em empresas de telecomunicações do Rio Grande do Norte

This study aims to understand the general model of governance of information technology adopted by telecommunication companies operating in Rio Grande do Norte. The research methodology used involved a theoretical and empirical approach prepared, involving two case studies on companies in the telecommunications industry working in the state of Rio Grande do Norte. The study covered the area of IT organizations, through interviews with managers responsible for the area of Telecommunications / IT. To study in accordance with the approach and address the problem of research, this study was based on qualitative criteria, which enabled the understanding of how companies adopt the governance of information technology. In conclusion, it was found that the governance practices of information technology employees are incipient, but that meet the needs of business and that they intend to implement in specific areas and use other practices of IT governance

Fatores inibidores à adoção de tecnologias de informação em micro e pequenas empresas fornecedoras da vale no estado do Pará

Universidade Estadual do Rio Grande do Norte

Adoção de tecnologias de informação nas micro e pequenas empresas fornecedoras da Petrobras no Rio Grande do Norte

A pesquisa tem como objetivo identificar as barreiras à adoção de tecnologias de informação por parte das micro e pequenas empresas. A pesquisa teórica foi orientada por estudos sobre adoção de tecnologias de informação e os fatores determinantes para esta adoção. Quanto à amostra, foi delimitada aos pequenos fornecedores não adotantes do sistema de compras eletrônicas da Petrobras no Rio Grande do Norte. A pesquisa é exploratória, do tipo levantamento de dados, com abordagem quantitativa. A pesquisa de campo foi realizada nos meses de novembro e dezembro de 2006, junto a 55 empresas, através de um questionário estruturado, respondido pelos gestores. Para a análise dos dados, foram utilizadas técnicas estatísticas, tais como análise descritiva e exploratória de dados, testes de hipótese e análises multivariadas de dados. Os resultados evidenciam a existência de uma infra-estrutura de TI básica, com baixo nível de utilização dessas tecnologias para propósitos mais avançados dentro das empresas e em especial a sua utilização para as atividades de gestão e estratégias de acesso a mercados, principalmente o seu uso como ferramentas para o comércio eletrônico. Os resultados mostraram também que os aspectos técnicos e financeiros são percebidos como obstáculos maiores que os fatores socioculturais e humanos. As variáveis relacionadas com os custos da TI e de consultoria externa, a percepção de dependência de fornecedores de TI e a falta de priorização de esforços ára a TI

O uso da informação contábil no setor sucroalcooleiro: um estudo nas indústrias de Alagoas

This study has the purpose of discussion and reflection of how the accounting information in the managemental area are used by the sugar & alcohol industry, located at State of Alagoas, aiming to identify if them please their managers expectations in the process of taking decision. Ahead of an existent universe of 27 (twenty seven) companies registered at the Sugar & Alcohol Labor Union of State of Alagoas SINDAÇUCAR files, were collected 14 (fourteen) questionnaires to support the current research classified as explorative and descriptive. The junction of these two kinds of research resulted in a quantitative and perceptive analysis of the use of the accounting information in the process of taking decision of the Sugar & Alcohol industry in Alagoas. The results demonstrated in this research indicate that, although the managers consider relevant the information at cost area, they do not use them in the process of taking decision. The reports emitted by accountancy are only financial, such as balance sheets, income statement, financial flow, among others factors. The importance order that the managers give to the accounting information and the kind of information that they use in the process of taking decision do not indicates that they use the accountancy in administration level. The statistics analysis of the files collected allows infer that the information provided by accountancy are considered important, however are few used at the manager process

Práticas de governança de tecnologia da informação: um estudo de caso em empresas de telecomunicações do Rio Grande do Norte

This study aims to understand the general model of governance of information technology adopted by telecommunication companies operating in Rio Grande do Norte. The research methodology used involved a theoretical and empirical approach prepared, involving two case studies on companies in the telecommunications industry working in the state of Rio Grande do Norte. The study covered the area of IT organizations, through interviews with managers responsible for the area of Telecommunications / IT. To study in accordance with the approach and address the problem of research, this study was based on qualitative criteria, which enabled the understanding of how companies adopt the governance of information technology. In conclusion, it was found that the governance practices of information technology employees are incipient, but that meet the needs of business and that they intend to implement in specific areas and use other practices of IT governance

Fatores inibidores à adoção de tecnologias de informação em micro e pequenas empresas fornecedoras da vale no estado do Pará

Universidade Estadual do Rio Grande do Norte

Estratégias de Competitividade Industrial em Empresas Cooperativas: O caso COMTERN

CAMPOS,Maria da Luz Góis; ANEZ,Miguel Eduar- do Moreno; CARÍCIO,Marcelo Rique. Estratégias de Competitividade Industrial em Empresas Cooperativas:O caso COMTERN. In:ENCONTRO NACIONAL DE ENGENHARIA DE PRODUÇÃO, 23, 2003, Minas Gerais. Anais...Ouro Petro: ADEPRO, 2003. p. 1-8.

TECNOLOGITecnologia da informação: commodity ou ferramenta estratégica?

RAMOS, A. S. M. ; FERREIRA, L. B. . Tecnologia da informação: Commodity ou Ferramenta Estratégica?. Revista de Gestão da Tecnologia e Sistemas de Informação , USP, São Paulo, v. 2, n. 1, p. 69-79, 2005.

Pesquisa: informação estratégica para tomada de decisão

Apresenta a pesquisa como fator importante para os gestores das organizações na tomada de decisão nesse novo cenário evolutivo e dinâmico da economia global no qual a informação é um produto relevante para as empresas. Abrange os tipos de pesquisas, quantitativas ou qualitativas, os métodos de coleta de dados. Considera as características para a realização de pesquisa para gerar resultados, produto final, relevantes aspectos para os patrocinadores das pesquisas. Resume as questões éticas aplicadas a pesquisa para que as partes participantes tenham assim assegurados os direitos de todos os envolvidos. Por outro lado, a busca na literatura apresenta a importância dos resultados de pesquisa como parte do processo administrativo das organizações, dentre elas as unidades de informação em especial. Observa a visão sobre a opinião pública e suas aplicações nas pesquisas diante da visão de alguns autores pertinentes. Enfoca a necessidade do bibliotecário de aprimorar suas competências na área da Gestão da Informação e do conhecimento em geral para saber tomar decisões estratégicas e relevantes na melhoria da qualidade de produtos/serviços em unidades de informação.

Modelo institucional do processo de estruturação de empresas de desenvolvimento de software: um estudo de múltiplos casos

Some authors have shown the need of understanding the technological structuring process in contemporary firms. From this perspective, the software industry is a very important element because it provides products and services directly to many organizations from many fields. In this case, the Brazilian software industry has some peculiarities that distinguish it from other industries located in developed countries, which makes its understanding even more relevant. There is evidence that local firms take different strategies and structural configurations to enter into a market naturally dominated by large multinational firms. Therefore, this study aims to understand not only the structural configurations assumed by domestic firms but also the dynamic and the process that lead to these different configurations. To do so, this PhD dissertation investigates the institutional environment, its entities and the isomorphic movements, by employing an exploratory, descriptive and explanatory multiple cases study. Eight software development companies from the Recife's information technology Cluster were visited. Also, a form was applied and an interview with one of the main firm s professional was conducted. Although the study is predominantly qualitative, part of the data was analyzed through charts and graphs, providing a companies and environment overview that was very useful to analysis done through the interviews interpretation. As a result, it was realized that companies are structured around hybrids business models from two ideal types of software development companies, which are: software factory and technology-based company. Regarding the development process, it was found that there is a balanced distribution between the traditional and agile development paradigm. Among the traditional methodologies, the Rational Unified Process (RUP) is predominant. The Scrum is the most used methodology among the organizations based on the Agile Manifesto's principles. Regarding the structuring process, each institutional entity acts in such way that generates different isomorphic pressure. Emphasis was given to entities such as customers, research agencies, clusters, market-leading businesses, public universities, incubators, software industry organizations, technology vendors, development tool suppliers and manager s school and background because they relate themselves in a close way with the software firms. About this relationship, a dual and bilateral influence was found. Finally, the structuring level of the organizational field has been also identified as low, which gives a chance to organizational actors of acting independently

Do tratamento das reclamações à gestão da insatisfação: o comportamento de empresas hoteleiras mediante a insatisfação de seus clientes

Consumer dissatisfaction, when properly handled, is a significant information source for the manager. Studies in this area allow broadening the understanding of certain customer attitudes and behaviors, such as loyalty, repurchase intention or satisfaction and trust increase. Above and beyond supporting consumer feedback, dissatisfaction can provide significant opportunities for organizational learning. Starting from dissatisfied customer information, companies can detect service flaws and develop new products. This work presents the results of an investigation on the behavior of businesses belonging to the hotel sector in Natal, RN, through the dissatisfaction of their customers. We have sought to map the main problems presented by customers to hotels, in the perception of managers and employees, as well as to understand both the process of dissatisfactionrelated data collection, analysis, and processing, and the utilization of such information by businesses. Beyond this, we have compared the habits of organizations to the company reaction approaches described in the literature: Complaint Handling, Complaint Management, and Dissatisfaction Management. The used methodology has been based on case study. Data was collected via indepth interviews with managers and employees in six hotels, two independent ones and four belonging to national and international hotel networks. We have also made use of documents provided by the organizations, such as guest complaint registers and reports from satisfaction surveys on which content analysis was subsequently performed. The results of the investigation point to a high level of awareness in the companies concerning the importance of consumer dissatisfaction. Even though the maximum grade in the procedure scale is not achieved, it has been observed that answer to dissatisfaction is given in planned and systematic form, geared towards consumer satisfaction and improvement of products and processes. Hotel businesses still have to look into other possibilities for mapping consumer dissatisfaction, which implies, among other aspects, articulation with a range of public and private organizations in such a way as to guarantee sustainability of touristic activities in the long term

Impactos da adoção de sistemas de informação no judiciário: pesquisa com usuários do sistema processual virtual em um juizado especial federal

The Information Technology (IT) is increasing his applicability to business, both private and public companies. It is necessary the adequate use of the new technologies and get cooperation and technology acceptance of the system. People tend to resist to the changes, contributing so that the technology is rejected or even it is not recognized as promoting of the changes. This study is relevant and aim to evaluate the impacts of new technologies, considering their users as fundamental factors in the change process. The survey analyzed the advantages and the barriers of the system use in three federal special judicial of Rio Grande do Norte, with data collected in May of 2007, through the application of questionnaires to thirty eight users of the virtual system CRETA. The users' perception was evaluated, under the optics of five variables: efficiency, image, agility, ease of use and quality. Starting from the obtained results, it was evidenced that the implementation of the system felt accordingly the expected and it reached the objectives intended that were: the velocity and efficiency in the path of the lawsuits, larger productivity, resulting in a better quality of the final work introduced to the citizen and proportionate an improvement in the organizational image of the judiciary power