INFORMATION SECURITY TREATMENT ANALYSIS ON A FEDERAL PUBLIC EDUCATION INSTITUTION

Abstract

Information Technology (I. T) and its governance are increasingly present in educational institutions development by improving strategies and objectives. This study aims to verify how is information security processed through risk management within I.T governance. As a mixed exploratory research, this study was developed in a federal public education institution through questionnaires for data survey and analysis regarding information security practices within I.T governance. Data analysis suggests that the verified components are applicable to the institution, allowing improvements on principles implementation and maintenance by awareness of the risk environment and the opportunities it offers.