Modelagem de processos de tratamento de incidentes de segurança da informação do NTIC/UNIPAMPA

Abstract

Technological advancement requires that organizations make available your information in digital format. However, there is the need for appropriate measures to keep this information secure and support the access control information prioritizing safety. View the processes that demonstrate how this security is held, may allow a better understanding, otherwise examine them, as well as a possible productivity gain. This course conclusion work aims at modeling and optimizing of processes involving the handling of information security incidents occurred in this public institution of higher education. Will be used to approach management of business processes to optimize the treatment processes of information security incidents occurred in thisinstitution, some represented in this work, to illustrate how this process can be reproducible using the BPMN notation for modeling processes to meet the desired goals. The modeling will be validated by the team responsible for handling such incidents of the institution. With the modeling and optimization performed aims to: develop a standardized way to deal with these incidents , enabling the reduction of rework saving resources of the organization and identify whether there are ways to implement alternatives to improve the management of treatment processes such incidents. This paper presents the results of modeling of treatment processes for information security incident that demonstrated to be feasible. Thus demonstrating the work and feasibility of the proposed standardization of the treatment processes of information security incidents handled by the security staff of this institution. And proposing improvements to current processes with the implementation of tools for automating activities such as reporting, as well as the automatic alarm anomalies.