Consultoria em Gestão da Informação e Proteção de Dados: Estudo de caso da empresa Interaction Layer

Abstract

Given the importance of obtaining quality certification, it is intended, with this dissertation, to deepen concepts associated with information security, as well as to consolidate, in practice, the implementation phases of a management system, in order to evaluate the applicability of a standard. From the survey of information assets to the mapping of information flows, ISO 27001 implementation tasks were carried out, which is the main focus of the work. This work presents the analysis and perception of the current situation of the company in relation to the consultancy of information technologies, in order to reach the knowledge of the procedures and to contribute to the improvement of these processes. It will be essential to expose the new data protection regime, through the application of Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, establishing its articulation with the security standard to be applied in company. Determination and risk management are important notions in data protection law and standardization. The dissertation meets a need created by article 25 of the general data protection regulation, in which it bases two principles that companies are obliged to comply with (data protection from conception and by default), having been elaborated a good practice manual.