Given the evolution of information technology and its direct relation to the objectives of the_x000D_ organizations, the universe of threats and vulnerabilities increases, therefore it is necessary to protect one of the most important assets of the organization, information, ensuring always availability, confidentiality and integrity of the same._x000D_ Faced with this reality, we see that not having an information security program to provide the guarantees necessary for the information in any organization, amid a highly competitive market today, represents a considerable disadvantage against companies in the same sector who do work the issue within its organizational culture. This disadvantage could bring very serious, such as the loss of a significant number of customers or working arrangements with other companies losses, affecting mainly the financial side of the organization, and co...