Access Management as a Security Critical Factor: A Portuguese Telecommunications Company Case Study

The security of information and information systems is now an important and timely issue insofar as it conditions the normal development of economic activities and may even compromise the sustainability of the economic organizations themselves. The news about the violation of information privacy or the breach of security in the information systems environment has alerted management to the need to evaluate the existing security policies and procedures, namely at information systems and information technology. In this context, the present research work presents a study on the criticality of information systems access management in a large Portuguese telecommunications company, through the analysis of organizational access management practices and procedures. In this study, different methodologies were adopted to analyze the current situation, assess the organizational methodologies and politics, and optimize the management of different types of users.