Study of human aspects of information security applied at the dean's office of people management of the Federal University od Paraíba - UFPB

Abstract

Introduction: The universe of activities that permeate information technology is subject to various forms of threats that seriously compromise its security. The technology itself is responsible for providing part of the solution to these problems. However, some of the vulnerabilities and threats to which information systems are exposed can be attributed to deficiencies in organizational procedures and human behavior. In this context, it is positive to study, from the Information Science viewpoint, one subjective variables of the information security process, which is related to people. For this, this paper presents an experience report about the behavior of the public servants of the Dean's Office of People Management - Progep of the Federal University of Paraíba - UFPB related to information security.
Objective: Identify which information security actions, related to human aspects, are used by the Dean's Office of People Management - Progep of the Federal University of Paraíba - UFPB.
Methodology: This research was characterized as descriptive, with quantitative-qualitative approach. For data collection, an online questionnaire was sent by e-mail to Progep's Public Servants, during the period from July 11 to 25, 2014.
Results: It was found that 93% of respondents had no knowledge of information security, 50% rarely exchange their passwords. But the most alarming was that 60% refused to pass the virus scan on their workstations.
Conclusions: Was identified by the research that there are no procedures to raise awareness among public servants about the importance of keeping safety the organizational information as well as the lack of a security policy that guides how to behave in the face of any threats.