7 / 46
7
acons taken to comply with norms and regulaons, be
they domesc or internaonal, also having prevenon
as one of its main funcons - in an aempt to ancipate
any kind of deviaon or inadequacy and avoid frauds.
In this respect, digital cerficaon (explained below) is
born as a tool that may be combined with compliance
and good management pracces, considering offering
the possible idenficaon of group acvies in digital
means.
2.
Theore!cal Reference
Organizaons need to make use of informaon,
knowing how to idenfy which may be used most
adequately. Informaon is an asset, adding value to the
organizaon. It is a set of data classified and organized
for organizaons and their members to make use of.
Informaon is actually a factor that may determine the
life or death of acvies in a business.
The challenge is controlling access to all informaon,
mainly when dealing with banks and store chains,
among others, so as to avoid assuming risks generated
by undue access and use of informaon acquired or
fraudulent changes in informaon. In table 1 the exisng
types may be idenfied:
Resulng from inseron of technology, be it in the
execuon of a bank payment on the internet or the
automaon of processes, this commodity has opened
doors to frauds through digital media, also called virtual
crime.
And, in this direcon, one of alignment with compliance,
digital signatures are born as an alternave mechanism
for homologaon of the most varied of operaons,
idenfying people and processes executed in an
inadequate way or in a way that is not failsafe.
2.1
Signatures and Digital Cer!ficate
Very common in the non-Anglo-Saxon legal tradion,
the signing of documents is a weak link in operaons.
In Brazil, which has a Lan tradion, real signatures are
used to guarantee the certainty of their authencity. In
electronic documents, in turn, said signatures would be
impossible, as they are intangible, needing technological
creaon and guaranteeing certainty of authorship. Faced
with the difficulty of guaranteeing trustworthiness,
digital signatures were developed.
ICP, the Brazilian acronym for PKI - Public Key
Infrastructure refers to the official Brazilian
Infrastructure, established in 2001. It is a hierarchic
chain of confidence that makes possible the issuing of
digital cerficates for virtual idenficaon of the cizen.
It must be pointed out that the model adopted in
Brazil was the single root cerficate, with ITI – Instuto
Nacional de Tecnologia da Informação (the Naonal