Segurança da informação: vazamento de informações - conscientização ou privação?

Abstract

This work deals with corporative information leakage, and was prepared to respond to the main motivator to combat the sensitive information leakage in companies, a problem that has been consolidating as one of the principal threats to the information security of organizations. With this we would like to discuss the main challenges companies face in combating information leakage and to create an action plan to make the users aware of how to treat the information, creating a secure behavior. To develop this, a bibliographic study was used, based on materials previously elaborated in the area, as well as surveys in the field which confirmed the obtained results. Initially the study addresses the contextualization of the theme aiming to demonstrate the relation between the information society development, the evolution of technology, the companys day to day implications and more specifically those factors that maintain a relation with the information leakage in the organizations. Lastly, this work presents alternatives to mitigate the organizations information leakage problems, which were backed up by a field survey that demonstrated how information leakage is viewed in Brazilian companies and, consequently, seeks justify the main affirmations and conclusions presented throughout this survey. In certain cases, avoiding information leakage is connected to a series of actions that include process improvements, introduction of prevention technologies and, more than ever, the implementation of constant awareness training programs. This is because, even with more automatic processes and technologies, the human element will always be a risk factor, that is to say, people will be using, manipulating and even leaking corporate information, be it intentionally or not.