Framework de riscos da segurança da informação no uso das tecnologias da transformação digital nas empresas

Abstract

The increasing impact of digital technologies in society, with rapid and disruptive changes, including more efficient and modern processes, press companies to use digital solutions. However, companies have limited choices, and they rarely can avoid being affected by the speed and challenges of digital technologies. Researchers have noticed a perspective that the cybersecurity risk of using those technologies is not completely visible, even with the advantages of this phenomenon. In this context, this research aims to reveal the associated risks of using Digital Transformation technologies that can cause unfavorable effects compared to initial expectations. As a research methodology, a systematic literature review was carried out, searching for scientific articles in academic databases. It provided visibility of the risks when adopting digital technologies and provided a framework that highlights the most relevant risks involved. IT specialists evaluated those risks through a questionnaire, and its results allowed the identification, organization and classification of the risks that companies are subjected to when using digital technologies. As a contribution to the market and the academic settings, this research provides a framework to support companies in their Digital Transformation journey and recognize the cybersecurity risks associated with digital technologies. Future works suggest creating a model for risk prioritization and mitigation with the proposed framework as a starting point.