Aspectos do gerenciamento de riscos de tecnologia da informação nas empresas: um estudo de caso múltiplos

The information technology - IT- benefits have been more perceived during the last decades. Both IT and business managers are dealing with subjects like governance, IT-Business alignment, information security and others on their top priorities. Talking about governance, specifically, managers are facing it with a technical approach, that gives emphasis on protection against invasions, antivirus systems, access controls and others technical issues. The IT risk management, commonly, is faced under this approach, that means, has its importance reduced and delegated to IT Departments. On the last two decades, a new IT risk management perspective raised, bringing an holistic view of IT risk to the organization. According to this new perspective, the strategies formulation process should take into account the IT risks. With the growing of IT dependence on most of organizations, the necessity of a better comprehension about the subject becomes more clear. This work shows a study in three public organizations of the Pernambuco State that investigates how those organizations manage their IT risks. Structured interviews were made with IT managers, and later, analyzed and compared with conceptual categories found in the literature. The results shows that the IT risks culture and IT governance are weakly understood and implemented on those organizations, where there are not such an IT risk methodology formally defined, neither executed. In addition, most of practices suggested in the literature were found, even without an alignment with an IT risks management process

Sistemas de gerenciamento de bibliotecas: riscos decorrentes do processo de migração de dados

This work aims to analyze risks related to information technology (IT) in procedures related to data migration. This is done considering ALEPH, Integrated Libray System (ILS) that migrated data to the Library Module present in the software called Sistema Integrado de Gestão de Atividades Acadêmicas (SIGAA) at the Zila Mamede Central Library at the Federal University of Rio Grande do Norte (UFRN) in Natal/Brazil. The methodological procedure used was of a qualitative exploratory research with the realization of case study at the referred library in order to better understand this phenomenon. Data collection was able once there was use of a semi-structured interview that was applied with (11) subjects that are employed at the library as well as in the Technology Superintendence at UFRN. In order to examine data Content analysis as well as thematic review process was performed. After data migration the results of the interview were then linked to both analysis units and their system register with category correspondence. The main risks detected were: data destruction; data loss; data bank communication failure; user response delay; data inconsistency and duplicity. These elements point out implication and generate disorders that affect external and internal system users and lead to stress, work duplicity and hassles. Thus, some measures were taken related to risk management such as adequate planning, central management support, and pilot test simulations. For the advantages it has reduced of: risk, occurrence of problems and possible unforeseen costs, and allows achieving organizational objectives, among other. It is inferred therefore that the risks present in data bank conversion in libraries exist and some are predictable, however, it is seen that librarians do not know or ignore and are not very worried in the identification risks in data bank conversion, their acknowledge would minimize or even extinguish them. Another important aspect to consider is the existence of few empirical research that deal specifically with this subject and thus presenting the new of new approaches in order to promote better understanding of the matter in the corporate environment of the information units

Riscos ocupacionais e acidentes de trabalho em um serviço de atendimento móvel de urgência do Rio Grande do Norte

Exploratory, descriptive and quantitative study with prospective data, performed in the Mobile Emergency Care Service in the metropolitan region of Natal/RN, in order to identify the knowledge of the multidisciplinary team about the rules of standard precautions and worker safety, to identify occupational hazards peculiar to the activities of this service; characterize work-related accidents (WRA) and know the procedures adopted after each WRA. The population consisted of 162 professionals and data were collected between the months of November and December 2010. As for personal and professional characteristics, of the 162 professional, 12,96% were physicians; 6,79%, nurses; 33,95%, nursing technicians, 46,29%, conductors; 74,70% were male; 43,21% were between 31 and 40 years old; 69,33% lived in Natal/RN, 50,00% had completed high school; 58,64% were married; 69,75% had children, 46,91% were between 1 and 4 years of training; 61,73% had improvement courses; 59,25% had 3 to 4 years of service; 54,32%, with 1-4 years experience in emergency; 44,44% received 1-2 minimum wages; 78,40% received insalubrity premium; 67,28% worked in Basic Support Unit (BSU); 83,95% had journey on SAMU Metropolitano of 31-40 hours per week; 52,47% had other employments. As for knowledge of rules of standard precautions, safety and occupational hazards, 99,38% knew what it was WRA; 62,96% gave incomplete answers; 74,07% knew the rules of prevent WRA; 46,67% acquired this knowledge in lectures; 53,09% knew Personal Protective Equipment (PPE); 71,60% gave incorrect answers about the importance of standard precautions; 45,06% never received an educational intervention on this issue; 89,51% said that educational interventions in the prevention of WRA are very important; 90,12% pointed out this as a very important issue in the workplace; 27,00% suggested guidance on the topic in the workplace; regarding the physical hazards, 34,57% considered noise as the most important; about chemical hazards, 78,40% chose the gases and smoke; for biological hazards, 48,77% reported contact with the blood; for mechanical hazards, 80,86% said that were transport accidents; about ergonomic risks, 40,12% say it is the tension/stress in the care of critically ill, psychiatric and aggressive patients; and there was an average of 4,5 to the feeling of safety in the workplace. Regarding the data on the WRAs occurred, 31,48% experienced at least one accident event; 72,55% did not notify it; 60,98% answered that there was no routine for notification; 56,86% were performing patient transportation; 49,02% were hurt in the Basic Support Unit/Rescue Unit (BSU/RH); 60,78% occurred during the day; 96,08% of professionals were in normal work schedule (24 hours on duty); 31,37% had contusion; 58.82% had damage to members/pelvic girdle; 43,14% had traffic accidents. About the evolution of the WRA, 62,75% did not have to take time away from work; 76,47% had no sequelae; 88,24% did not require rehabilitation; no professional had a change of occupation. And by means of univariate logistic regression, showed that the nurses and male sex were risk factors for the occurrence of WRA. We conclude that there were gaps in the knowledge of staff regarding WRA, emphasizing the need for continuing education in biosafety in the service.

Atendimento Pré-hospitalar Móvel. Mapeando Riscos e Prevenindo Erros

The attention with safety of the patients is important in the quality of the nursing and health care. In the pre-hospital care, such care is essential on site with the purpose of avoiding possible consequences to the individual, ensuring a fast and appropriate care, with improvement of the morbidity and reduction of the mortality. This medical attention is equally associated with the significant risks of adverse events and serious mistakes, which can be reduced with the awareness of the professionals, organization and quality management. It is a descriptive, transversal research, of quantitative approach, with the objective of identifying the risks for the safety of the patient during the mobile pre-hospital care under the view of the nurses, in a city of the Brazilian Northeast. The sample was formed by 23 nurses. The inclusion criteria: to have at least two years of experience and accept to participate on the research. The data collection was done in two steps, first photo collection, through the adapted method of photographic analysis, and the second with the application of questionnaire, divide in two parts: socio-professional data and digital photo punctuation instrument of the patient s safety. The majority of the nurses had an average working time in the mobile pre-hospital care of six years and six months, in the age group of 38 to 53 years old (69,56%) and with Lato sensu specialization (73,91%), being (29,41%) emergency and (29,41%) in intensive care. The (74%) have the Advance Cardiac Life Support (ACLS) and (100%) have the Pre-Hospital Trauma Life Support (PHTLS); (91, 30%) know the thematic safety of the patient. On the pictures it was observed a bigger variability of the categories (risks) where 44% of variance emerged on the first picture of the research. The pictures 4 and 9 with the average below 5 were classified as very insecure, while pictures 7 and 3 with an average above 7, very secure. On the results of risks observed for the patient s safety in the mobile pre-hospital care five categories emerged: organization and packaging of the equipment and materials, routines and specificities in the mobile pre-hospital care, risks on the management of medications, for traumas and infections. Starting from the analysis of these risks, it was proposed ten steps for the safety in the mobile pre-hospital care: 1- Identify the patient; 2- Safety related to prevention of infection; 3- Safety in the management of medications; 4- Safety and standardization of the packaging of equipment and materials; 5- Attention to the specificities of the mobile pre-hospital care; 6- Incentive and value the participation of the patient and family; 7- Promote the communication with the central of regulation; 8- Prevention of traumas and falls; 9- Protect the skin from additional injuries; 10- Understand the benefit of all the equipment in the ambulance. The multiple risks and their emerged combinations on the research indicate a variety of actions to be developed and stimulated, like the use of steps for the patient s safety in the mobile pre-hospital care which contributes with the aid and management of risks, reduction of mistakes, disabilities and death

Um estudo da aplicação do conceito de risco na conscientização e conhecimento de estudantes de ensino técnico sobre riscos de segurança e saúde ocupacional em laboratório de soldagem

This dissertation presents a discussion on the level of risk awareness of students who have welding practice in the laboratories at CEFET/PI, both in Teresina and Floriano. Its main goal is to investigate risk factors involving students, teachers and employees that work in these laboratories. It s an empirical survey, held among a certain amount of students from the course in Mechanic Technology. For data analysis, the concept of risk was compared to the students direct measure of perception. The main results suggest the students must be better informed, more risk aware and more competent, in order to avoid accidents. They also point to a strong need for a more formal and effective performance to assure full consciousness about the risks involving the welding practice.

Superando os riscos da segurança baseada em perímetro - Uma abordagem com identificação federada através de certificados digitais A3/ICP-Brasil e SAML

The traditional perimeter-based approach for computer network security (the castle and the moat model) hinders the progress of enterprise systems and promotes, both in administrators and users, the delusion that systems are protected. To deal with the new range of threats, a new data-safety oriented paradigm, called de-perimeterisation , began to be studied in the last decade. One of the requirements for the implementation of the de-perimeterised model of security is the definition of a safe and effective mechanism for federated identity. This work seeks to fill this gap by presenting the specification, modelling and implementation of a mechanism for federated identity, based on the combination of SAML and X.509 digital certificates stored in smart-cards, following the A3 standard of ICP-Brasil (Brazilian official certificate authority and PKI)

Simulação do sistema de esgotamento sanitário de Ponta Negra- Natal: mitigação dos riscos ambientais e estratégia de manutenção preditiva

The simulation of SES-Natal Ponta Negra: mitigation of environmental risks and predictive maintenance strategy was developed in the context of several operational irregularities in the pumping stations and sewage systems in the system Ponta Negra. Thus, the environmental risks and complaints against the company due to overflows of sewage into the public thoroughfare became common. This neighborhood has shown in recent years an increase of resident higher than the initial expectation of growth. In this sense presumed the large population growth and generation of sewers higher than expected, associated to the use of corrective maintenance and misuse of the system may be the main causes of operational failures occurring in the SES. This study aimed at analyzing the hydraulic behavior of SES Ponta Negrathrough numerical simulation of its operation associated to future scenarios of occupation. The SES Ponta Negra has a long lengthof collection networks and 6 pumping stations interconnected, being EE 1, 2, 4 coastal way, and beach Shopping interconnected EE3 to receives all sewers pumped from the rest pumping station and pumped to the sewage treatment station of neighborhood which consists of a facultative pond followed by three maturation ponds with disposal of treated effluent into infiltration ditches. Oncethey are connected with each other, the study was conducted considering the days and times of higher inflow for all lifts. Furthermore, with the aim of measuring the gatherer network failures were conducted data survey of on the networks. Thephysical and operational survey data was conducted between January/2011 and janeiro/2012. The simulation of the SES was developed with the aim ofdemonstrating its functioning, eithercurrently and in the coming years, based in population estimates and sewage flow. The collected data represents the current framework of the pumping stations of the SES Ponta Negra and served as input to the model developed in MS Excel ® spreadsheet which allowed simulating the behavior of SES in future scenarios. The results of this study show thatBeach Shopping Pumping Station is actually undersized and presents serious functioning problemsthatmay compromise the environmental quality of surrounding area. The other pumping stations of the system will reach itsmaximum capacity between 2013 and 2015, although the EE1 and EE3 demonstrateoperation capacity, even precariously, until 2017. Moreover, it was observed that the misuse of the network system, due to the input of both garbage and stormwater, are major factors of failures that occur in the SES. Finally, it was found that the corrective maintenance appliance, rather than predictive,has proven to beinefficient because of the serious failuresin the system, causing damage to the environment and health risks to users

Percepção de riscos ambientais de populações vulneráveis a inundações e deslizamentos de dunas em Natal-RN

In urban, flooding and landslides are among the troubles that most bring human and material loss. Therefore, this study objected to perform an analysis on the risk perception on the population living in social environmental vulnerable places in order to understand what is the way this population realize the risks they are exposed to and what are the outbrave strategies the develop. The first analyzed area was Complexo Passo da Pátria for the flooding risk problematic and then the Cidade Nova neighborhood threatened by the dunes slides. The areas locate, respectively, in the West and East zones of Natal-RN. Using an interview screenplay adapted from risk perception researches from different brazilian cities, it was collected primarily data on the variables: perception, evaluation and choice, safety threshold, adjustment, decision and participation. Due to the studied areas characteristics the qualitative approach adjusted itself to the difficulties for accessing the areas. The studied places characterize for its insecure situation like selling/using drugs, robbery and murder among others. Due to this situation the interviewed individuals were the ones that could be found more accessibly and available in the moment and the interviews were made in the community leader presence of each area. Through the discourse of the respondents analysis it was able to conclude that the interviewed population is exposed to a high vulnerability grade and risks. However it was identified substantial differences between the perception and risks of Complexo Passo da Pátria and bairro Cidade Nova, because in the first area the intervied ones can recognize the high risk they are exposed to in a more emphatic way to the interviewed ones for the Cidade Nova neighborhood. Furthermore, there is a heavy dissatisfaction for the population of the two places about the city hall positions relating to the present problems in the studied areas. It was also identified the strategy development of acquaintanceship with the risk in the research places beyond a feeling of belonging and affection between the dwellers and the places, yet it was more evident for Complexo Passo da Pátria. Though this analysis it was possible to understand and perceptions and the behavior of the individuals or social groups facing the risks as acceptance and rejection of determined risks beyond adaptation measures of living together with the persistence presence of risks. Therefore, qualitative nature researches emphasizing the perception approach are in the fundamental importance in the studies about risks making it possible to offer aids to the urban planning and management in the implement of effective preventive measures and compatible with the population aims

Fatores de riscos cardiovasculares em adolescentes da cidade do Natal-RN

Estudos têm demonstrado elevada prevalência de fatores de risco cardiovascular em adolescentes a redor do mundo, entretanto, é possível que esses fatores de risco se comportem de modo diferente em diferentes localidades. Objetivos: Examinar a prevalência do sobrepeso/obesidade e sua associação com outros fatores de risco cardiovasculares, em adolescentes, da cidade do Natal-Brasil. Métodos: Estudo observacional de delineamento transversal, realizado em 626 adolescentes (10 a 19 anos) de ambos os sexos. Foram estudadas as variáveis: peso, idade, gênero, cor, escolaridade, renda familiar, hábitos de vida, história familiar, peso, estatura, índice de massa corporal, relação cintura/quadril, pressão arterial, perfil lipídico, Glicose e Insulina de jejum e pós Dextrosol. Resultados: Foram avaliados 273 (43,6%) adolescentes do sexo masculino e 353 (56,4%) feminino. 26,4% dos adolescentes apresentaram sobrepeso/obesidade. A presença de obesidade familiar foi relatada por mais de 30 % da nossa amostra. Na análise de regressão logística múltipla; Idade, renda familiar, percentil de pressão sistólica, história familiar de hipertensão e obesidade, triglicerídeos, HDL colesterol, e HOMA RI mostraram-se associados com sobrepeso/obesidade. A relação cintura quadril apresentou-se mais elevada nas mulheres, e encontramos 10,9 % dos adolescentes com percentil de pressão sistólica (PAS) 95, e 7,4 % com percentil de pressão diastólica (PAD) 95. As dosagens de triglicerídeos, colesterol HDL e HOMA-RI alterados foram mais prevalentes nos que apresentavam IMC aumentado. As alterações do xi colesterol total, triglicerídios, glicemia pós dextrosol e HOMA teste, tiveram maior prevalência no gênero feminino. Na regressão logística binária, foram observadas associações do sobrepeso / obesidade com idade; OR 0,85, IC de 95% (0,78-0,92); p<0,001, pressão arterial sistólica; OR 2,65, IC de 95% (1,18- 5,94); p< 0,020, renda familiar; OR 2,34, IC de 95% (1,53-3,58); p< 0,001, história familiar de hipertensão arterial; OR 1,76, IC de 95% (1,15-2,71); p< 0,009, história familiar de obesidade; OR 1,50, IC de 95% (1,09-2,27); p< 0,04, aumento dos trigliceridios; OR 2,74, IC de 95% (1,69-4,43); p< 0,001, redução do colesterol; HDL OR 0,58, IC de 95% (0,38-0,87); p< 0,009 e o aumento do HOMA OR 3,16, IC de 95% (1,64 - 6,02); p<0,001. Conclusão: A prevalência de fatores de risco cardiovascular em Natal – Brasil se constitui em grave problema de saúde pública, atingindo níveis que se igualam ou até superam os de outras cidades tanto no Brasil, como em outros países

Predição em modelos de tempo de falha acelerado com efeito aleatório para avaliação de riscos de falha em poços petrolíferos

We considered prediction techniques based on models of accelerated failure time with random e ects for correlated survival data. Besides the bayesian approach through empirical Bayes estimator, we also discussed about the use of a classical predictor, the Empirical Best Linear Unbiased Predictor (EBLUP). In order to illustrate the use of these predictors, we considered applications on a real data set coming from the oil industry. More speci - cally, the data set involves the mean time between failure of petroleum-well equipments of the Bacia Potiguar. The goal of this study is to predict the risk/probability of failure in order to help a preventive maintenance program. The results show that both methods are suitable to predict future failures, providing good decisions in relation to employment and economy of resources for preventive maintenance.

Riscos à saúde dos trabalhadores em unidade de alimentação e nutrição de um Hospital Universitário

The Food and Nutrition Units (FNU) are designed to produce food for healthy and/or sick communities and need to be done in a way to ensure the quality of foodstuffs that were produced. In these units, in the working environment, in general, there is excessive noise, heat and physical condition with many adaptations, presence of obstacles, inadequate flows, as well as the ways of the working organization may represent risks for workers health and lead to errors during production and/or distribution of food. The main goal of this study was to analyse the working processes in the Food Production Unit of the university’s hospital and identify the workers' health risk factors, using for this the knowledge of ergonomics, specifically the method of Ergonomic Work Analysis (EWA). After this analysis it was possible to develop proposals that will bring improvements to the working conditions, minimizing health risk factors during the process of meals production. It’s crucial to reassert this method considers the work activity performed in real time and highlights the importance of listening and the engagement of the workers in the changing process. It is a descriptive research with a qualitative approach. In the field research were collected demographics data, employment characteristics of the individuals (age, education, stocking sector, the total length of service and length of service in the industry) and data related to their usual work (task analysis, activity analysis and Analysis of the working environment) in the FNU. The instruments that were used in this study were document analysis, global and systematic observations and semi structured interviews in order to identify the main complaints related to those activities developed by them. The study was based on data for the analysis of Bardin, 2011, so the documents have been selected and including those that treat issues related to risks to workers' health were selected. The result of semi-structured interviews, global and systematic observations took place a confrontation of this material to the theoretical framework, held the inference and the interpretation of results the light of the knowledge of ergonomics and legislation. Issues related to the risks and the perception of workers has crafted a table showing the frequency of responses to the physical, chemical and biological and even the risk of accidents and was made a descriptive analysis. The results of this analysis indicated that the unit in question presents several problems ambience of jobs, both in terms of physical structure, but also in the organization of work. Non-conformities that leads to a favourable environment to the development of disease and injury hazards and compromising the quality of food produced. It is necessary to comply with legislation and that short, medium and long-term measures are taken to ensure the physical integrity of workers and improve the working environment.

Proposta de modelo de gestão de riscos para uma IFES visando a realização de auditoria baseada em riscos

Organizations are susceptible to the occurrence of many events that may affect the achievement of their objectives. As a result, Brazilian Public Administration supervisory bodies have required institutions to adopt risk management policies. Given the large number of recommendations issued by Federal Audit Court (TCU) to various Federal Institutions of Higher Education (IFES) in this area, it is proposed a risk management model for Universidade Federal do Rio Grande do Norte (UFRN). This is an applied, exploratory and qualitative study. Regarding to technical procedures, it is characterized as documentary analysis, bibliographical research, case study and action research. The bibliographical research was used to support the elaboration of the Risk Management Guide for Federal Institutions of Higher Education (GERIFES). The documentary analysis, in turn, was used with the aim of knowing the organizational structure and the university´s macroprocesses. The author works in the university internal auditing department and shares the same problem. This characterizes the work as an action research. The case study supported both the elaboration of the guide and the simulation of the specific functionality for the university information system, demonstrated through the User Manual Module "Risk Management" proposed for the Integrated System of Property, Administration and Contracts (SIPAC). This manual has been prepared in order to facilitate the use of this tool if it will be incorporated into the university information system. As research results, a risk management model for UFRN was elaborated and a simulation of an informational tool, which is able to manage risks related to events that may affect the achievement of institutional objectives, was provided to the university administration.

Aspectos do gerenciamento de riscos de tecnologia da informação nas empresas: um estudo de caso múltiplos

The information technology - IT- benefits have been more perceived during the last decades. Both IT and business managers are dealing with subjects like governance, IT-Business alignment, information security and others on their top priorities. Talking about governance, specifically, managers are facing it with a technical approach, that gives emphasis on protection against invasions, antivirus systems, access controls and others technical issues. The IT risk management, commonly, is faced under this approach, that means, has its importance reduced and delegated to IT Departments. On the last two decades, a new IT risk management perspective raised, bringing an holistic view of IT risk to the organization. According to this new perspective, the strategies formulation process should take into account the IT risks. With the growing of IT dependence on most of organizations, the necessity of a better comprehension about the subject becomes more clear. This work shows a study in three public organizations of the Pernambuco State that investigates how those organizations manage their IT risks. Structured interviews were made with IT managers, and later, analyzed and compared with conceptual categories found in the literature. The results shows that the IT risks culture and IT governance are weakly understood and implemented on those organizations, where there are not such an IT risk methodology formally defined, neither executed. In addition, most of practices suggested in the literature were found, even without an alignment with an IT risks management process

Sistemas de gerenciamento de bibliotecas: riscos decorrentes do processo de migração de dados

This work aims to analyze risks related to information technology (IT) in procedures related to data migration. This is done considering ALEPH, Integrated Libray System (ILS) that migrated data to the Library Module present in the software called Sistema Integrado de Gestão de Atividades Acadêmicas (SIGAA) at the Zila Mamede Central Library at the Federal University of Rio Grande do Norte (UFRN) in Natal/Brazil. The methodological procedure used was of a qualitative exploratory research with the realization of case study at the referred library in order to better understand this phenomenon. Data collection was able once there was use of a semi-structured interview that was applied with (11) subjects that are employed at the library as well as in the Technology Superintendence at UFRN. In order to examine data Content analysis as well as thematic review process was performed. After data migration the results of the interview were then linked to both analysis units and their system register with category correspondence. The main risks detected were: data destruction; data loss; data bank communication failure; user response delay; data inconsistency and duplicity. These elements point out implication and generate disorders that affect external and internal system users and lead to stress, work duplicity and hassles. Thus, some measures were taken related to risk management such as adequate planning, central management support, and pilot test simulations. For the advantages it has reduced of: risk, occurrence of problems and possible unforeseen costs, and allows achieving organizational objectives, among other. It is inferred therefore that the risks present in data bank conversion in libraries exist and some are predictable, however, it is seen that librarians do not know or ignore and are not very worried in the identification risks in data bank conversion, their acknowledge would minimize or even extinguish them. Another important aspect to consider is the existence of few empirical research that deal specifically with this subject and thus presenting the new of new approaches in order to promote better understanding of the matter in the corporate environment of the information units