GOVERNANCE AND INFORMATION SECURITY POLICIES IN THE CORPORATE ENVIRONMENT: AN INTERDISCIPLINARY ANALYSIS OF COMPLIANCE AND THE HUMAN FACTOR

Abstract

This study investigates the effectiveness of Information Security Policies (ISP) in contemporary organizations, emphasizing the convergence between ISO/IEC 27001 technical requirements and the General Data Protection Law (LGPD). The central problem lies in the persistence of cyber vulnerabilities associated with human behavior, even in environments with high technological investment. Methodologically, a Systematic Literature Review was conducted under the PRISMA guidelines, analyzing 52 studies selected for their technical rigor. The results indicate that information security is an ongoing organizational process that depends on a structured documentary architecture (Directives, Standards, and Procedures) and the commitment of senior management. It is concluded that the consolidation of a security culture is the strategic differentiator for the protection of digital assets and the maintenance of organizational competitiveness.