Um modelo para suporte à gestão de riscos de segurança da informação em serviços de TIC com base na simulação de Monte Carlo

Abstract

With the increasing use of IT services worldwide, there is a growing need to protect these services against security threats. Identifying vulnerabilities and assessing the risks to which these services are exposed has become an essential requirement. Organizations must effectively manage IT security risks, yet the decision-making process regarding risk prioritization and mitigation strategies often relies heavily on the experience of managers and specialists. Such practices should take into account the potential business impact of these risks. Therefore, the development of new models and methodologies for IT risk management is a crucial demand in the field. This research proposes the development of a decision-support model for information security risk management, using a Monte Carlo simulation-based approach. The expected outcome of this research is to provide an effective framework for supporting information security risk management processes within organizations.