Segurança da informação: um estudo das diretrizes de segurança implementadas pelos recursos humanos em escolas municipais das cidades de Timon- MA, Teresina e Nazária no Piauí

Abstract

With the eminent technological advance knocking the door of education professionals almost daily, it is necessary to have an increasingly efficient recruitment and training process in order to ensure greater effectiveness in the practice of information security within schools. Aiming to know this process of recruitment and training developed in basic education schools (child education up to the fifth year of elementary school) in Timon-MA, Teresina and Nazária in the state of Piauí, this work intends to verify if basic controls recommended by ISO 27001 and 27002, to ensure information security in organizations, are applied efficiently. For this, a descriptive research with a quantitative approach to the data was carried out, where a questionnaire with direct and objective questions was applied to the servers of the schools (principals, teachers and secretaries), prepared from the seventh section of the ISO 27002, which makes recommendations to the human resources sector, to implement guidelines that guarantee the effectiveness of the information security practice for both new and old employees. The results showed that the practice of information security in these schools is still very deficient, as more than 50% of those surveyed revealed that there is no training focused on the area of information security, and more than 70% reported that there is no wants educational campaigns to encourage the practice of information security within the school