Desenvolvimento de políticas de segurança da informação para Faculdade de Engenharia da UEM - FEUEM

Abstract

The Faculty of Engineering of Eduardo Mondlane University (FEUEM) is a higher education institution, which has a computer infrastructure and consists of human resources, from employees to students. At the FEUEM there is no guide for the correct use of the technological resources there. Information Security Policy (ISP) is the guide previously mentioned. In this context the need arises to develop an ISP that will be responsible for managing information security. The present work aims to present norms and policies for the use of FEUEM's IT resources that can guarantee the principles of information security and minimize the vulnerabilities of FEUEM's information systems. To achieve this objective, a bibliographic survey was made about information security and its principles. This survey helped in the process of creating the ISP proposal for FEUEM. In parallel, DTIC's were interviewed in order to understand the main vulnerability of FEUEM and the main needs regarding information security. In this context, the present work culminates with the creation of a ISP for FEUEM, based on the ISO/IEC 27002 controls, which will serve as a guide for the institution's collaborators as well as for the students. The ISP includes rules for the use of the institution's technological resources, focusing on the layers of information security. It is expected, therefore, as a result a guarantee of Integrity, Availability and Confidentiality of the institutional assets, and minimization of vulnerabilities in the information systems of FEUEM, as well as an improvement in the understanding of the information security aspects by the human resources of the institution