RSAWS

Accounting of the assets Agrees that all the main sejaminventariados assets of information and has a responsible proprietor. The inventory of the ativosajuda to assure that the protection is being kept of adequate form. Convmque the proprietors of the main assets are identified and sejaatribuda the responsibility to they for the appropriate maintenance of the controls. Aresponsabilidade for the implementation of the controls can be delegated. It agrees quea responsibility for the rendering of accounts is with the doativo nominated proprietor. Classification of the Objective information: To assure that the information assets receive adequate umnvel of protection. It agrees that the information is classified to indicate aimportncia, the priority and the level of protection. The information possesss some levels of sensitivity ecriticidade.

Some item can need an additional level protection special outratamento. It agrees that a system of classification of the sejausado information to define a set appropriate of protection levels and to determine anecessidade of special measures of treatment. Security in people Security in the definition and recursosde work Has for objective To reduce the risks of human error, robbery, fraud or improper use of the installations. Including security in the responsibilities dotrabalho Convm that rules and sejamdocumentadas responsibilities of security where he will be appropriate, in accordance with the politics of security of informaoda organization. It agrees that they include any responsibilities general pelaimplementao or maintenance of the politics of security, as well as specific quaisquerresponsabilidades for the protection of determined active or pelaexecuo of determined processes or activities of security. Election and politics of staff Agree that verifications of control on equipepermanente are lead at the moment of the election of candidates. One sends regards that this includes the following one: ) the availability of references of satisfactory character, for example a professional and personal one; b) verification of the exactness and inteireza of the information of curriculumvitae of the candidate; c) confirmation of the eprofissionais academic qualifications; d) verification of the identity (passport or similar document).