Information Security

In the current reality, where data is the basis of the digital economy, the procedures and rules of Information Security are indispensable for a good business management because its implementation protects the value of a company. These are extremely relevant measures for the shielding of companies and involve all sectors, covering three levels: Technology, Processes and People.

In order to harmonize monitoring and privacy issues in the corporate environment and be compliant to the new standards in force, a specialized legal work is necessary to guarantee the legal conformity of the entire documentation related to Information Security, aligning the technical and legal aspects to legally shield the operational procedures and avoid situations related to incidents of privacy, monitoring, obtention of illicit evidence, loss of electronic evidence due to the lack of adequate collection, among others.

I.e., it is necessary to have procedures, standards and policies connected to the information system in accordance with Digital Law, updated and well-defined, being a pre-requisite for the execution of tasks of organization and production of companies, but, they cannot have the desired effect if approached separately. Thus, we note the main activities:

• Diagnostic opinion of technical legal audit of the maturity stage of the Information Security Management System in the company;
• Preparation and implementation of Information Security Management System, covering the policy, standards, procedures and contractual clauses;
• Preparation of BYOD Policy, mobility and remote work;
• Preparation and update of the Ethics Code Information Technology Area and the Collaborator's Code of Conduct;
• Preparation of Policy of Social Media and Instant Communication Applications;
• Support in the Campaigns for Awareness of Information Security, with preparation of primers, interactive contents and long-distance education to serve large public;
• Preparation of Confidentiality Agreements and NDA's;
• Support and participations in work Committees and Groups of Information Security;
• Advisory in Digital Law to ensure that the performance of the areas of Information Technology and Security;
• Legal support for the fulfillment of related legislation, accompanied by regulatory landmarks, public consultations and institutional relations with governmental authorities;