Cyber security : a case study of Brazil

Abstract

The purpose of the research is to identify the importance of the cyber security in the critical infrastructures in Brazil focused in the energy sector and to purpose some measures to provide the cyber security. The research has 6 chapters. In the first chapter is presented the theoretical bases that started the formulation of this thesis about a case study in Brazil regarding the need of a cybersecurity control body for critical infrastructures and the actions that can be implemented. The second chapter shows all the structure and control related to the use of Brazilian cyber space. In third chapter, the whole structure and importance of the Brazilian energy sector is presented, in order to prove that its cyber security is a matter of national security. The fourth chapter contains all the laws related to the protection of the Brazilian cyberspace, including the measures that must be taken and the responsibilities of each private agency or government. The fifth chapter summarizes cybersecurity policies regarding the protection of critical infrastructures. In the sixth chapter, after analyzing the studies presented in the previous chapters, presents the necessary measures to be implemented in relation to the cybernetic security of critical infrastructures and a proposal of a framework of good practices for protection planning, response and resilience in relation to cyber-attacks. The results of this research are that Brazil needs to centralize the cyber security coordination of the critical infrastructures in unique agency. This agency must have to apply guidelines about the cyber security measures and framework related of the critical infrastructures, because the cyber response will be more effective against some cyber attack.