A ameaça cibernética às infraestruturas críticas nacionais: Gestão contínua de exposição a ameaças cibernéticas na Petrobras

Abstract

This essay analyzes Continuous Threat Exposure Management (CTEM) at Petrobras, a company that holds one of the nation's most critical infrastructures. The study explores the application of CTEM within the company and its implications for cybersecurity, focusing on practices for integration with governance, risk, and compliance, as well as on threat detection and response. It is observed that Petrobras has made progress in its cybersecurity maturity; however, challenges remain, particularly in the prioritization and validation of threats. The research also highlights the importance of enhancing the company's security posture, promoting a proactive and integrated approach that can effectively respond to emerging threats.