Metodologia para gestão de riscos nos ativos de tecnologia da informação na Fundação Nacional de Saúde

Abstract

This work presents alternatives to minimize the possibility of impacts on IT assets with a simplified way of applying the methodology to be proposed. It can be used in any Information and Communications Security Risk Management project, whenever a assessment of the risks to which the assets involved (people, processes, technology and environments) are exposed, which require greater detail of the surveys to be carried out, regardless of the scope, from the simplest to the most complex. The Methodology for Risk Management in Information Technology Assets has been unfolded through planning that involves treatment, monitoring and control of risks, identifying and directing these treatments according to the types of risks, also understanding that some opportunities may arise and with them one can work for improvements, improvements, gains, among other positive impacts.