Laws, decrees and standards for information security management in government agencies

Abstract

This paper is a review in Brazilian current legislation that covers topics about information security management until July 2012 and applied to federal government agencies. Besides reflecting the potential impacts caused by Law 12.527. The objective is that this review will contribute to future research on the topic in the area of information science. It was verified in the corpus of the documents examined that same terms have been used with different definitions, in particular in the wording of Decree 4.553 and Law 12.527. Maintain terms in normative documents with different compositions cloud be cause confusion or different interpretations. Were also verified differences in the timing and procedures for information classification.