INFORMATION SECURITY AND DATA PROTECTION

Abstract

Information security and the protection of personal data form the central axis of this Final Paper, which discusses the importance of preserving organizations' information assets in the face of physical, logical, accidental or intentional threats. The main objective is to analyze the fundamentals of information security, the risks involved, contemporary threats and applicable legislation, with an emphasis on the General Data Protection Law (LGPD) and the General Data Protection Regulation (GDPR). The methodology adopted is of a bibliographical and documentary nature, based on specialized authors and national and international regulations. The work is structured in three chapters: the first deals with the fundamental concepts, principles and evolution of information security; the second deals with the threats that compromise the integrity and reliability of systems; the third analyzes personal data, protection mechanisms and legal requirements for the secure processing of information. The results indicate that information security must be treated as a continuous and strategic process, involving the participation of all levels of the organization, clear policies, preventive practices and strict compliance with current legislation. The conclusion is that, in an increasingly complex digital landscape, it is essential for public and private organizations to adopt a solid culture of information protection, integrating technology, governance and legal responsibility.