DESAFIOS E ESTRATÉGIAS PARA A SEGURANÇA DA INFORMAÇÃO EM AMBIENTES DIGITAIS DO SERVIÇO PÚBLICO NAS PREFEITURAS DE PEQUENOS MUNICÍPIOS DO VALE DO SÃO PATRICIO

Abstract

The digitization of public services in small municipalities imposes significant Information Security (IS) challenges, aggravated by resource scarcity and the need for compliance with the General Data Protection Law (LGPD). This study aimed to investigate IS challenges in small city halls in the Vale do São Patrício region and, based on a diagnosis, propose viable strategies to mitigate risks. The research adopted a mixed-methods (quali- quantitative) approach, with an exploratory-descriptive and applied nature, configured as an aggregated multiple case study across four municipalities (23 respondents). Data were collected through questionnaires and document analysis. The results revealed critical vulnerabilities, characterizing a "governance and instructional vacuum". It was diagnosed that 95.7% of employees have never received training, 45.5% of those untrained admit to sharing passwords, and 78.3% do not have backup routines. A knowledge "blind spot" regarding threats was identified, with Phishing showing the lowest average awareness (1.87 out of 5). Furthermore, 47.8% of employees are unaware of the existence of an IS team, and the failure to obtain documents (IS Policy/IT Master Plan) corroborates the perception of informal processes. It is concluded that the greatest vulnerability is human and organizational. As a product, this work proposes a set of adapted solutions, consolidated in a "Practical Information Security Guide" (Appendix C). The Guide focuses on the diagnosed gaps (Phishing, passwords, backup) as a low-cost, high-applicability strategy aligned with the municipalities’ reality of scarcity.