Security In Information Systems: Sociotechnical Aspects

Abstract

This work considers the sociotechnical approach that must be addressed when implanting and having maintenance of the information security of an organization. In general, only the technical aspects are considered by the IT professionals. These technical aspects generates in the organization in the day by day, a security process that seems as a set of distant rules and, because of this, the security process (the rules) will not be internalized by the users. To consider sociotechnical aspects means both making a complete approach for the security subject as well increasing the chances for the existence of a continuous process, following and protecting the information resources during the growing stages and moments of difficulties in the organization.