Uma introdução à gestão de riscos cibernéticos

Abstract

The digital revolution is affecting almost every aspect of everyday life. Society and business have become increasingly dependent on technology and the internet. As a result, the availability and security of all services we rely on for our daily lives, especially financial services, are exposed to cyber threats and associated risks. In this way, the need to structure and implement, in a data-based manner, the risk management process is clear, through the alignment of stakeholders' interests and the implementation of effective mechanisms to reward prudent decision makers, based on the mobilization of professionals and the internalization of a riskoriented culture into the organization's fundamental values. This work aimed to present, through the methodology of a bibliographical review of secondary sources, the management of cyber risks from a perspective that goes beyond the mere function of protection against possible financial losses resulting from the materialization of these risks, establishing and disclosing principles, guidelines and responsibilities to be observed in the risk management process, in order to enable the identification, assessment, treatment, monitoring and communication of risks inherent to the activities of companies that may affect the achievement of their objectivesand the performance of their business.