Soberania e uso de tecnologias emergentes e de serviços de computação em nuvem por empresas públicas federais no Brasil

Abstract

The use of emerging technologies, especially cloud computing services offered by foreign Big Techs, is at the core of the digitalization and innovation initiatives conducted by organizations and the basis of their sustainability and growth strategies. On the other hand, the use of cloud computing services poses risks and poses new challenges to national information security and sovereignty, especially when it involves the processing of confidential information under the custody of government agencies. To address the risks of exposure of the State's strategic information and mitigate foreign dependence, the Institutional Security Office of the Presidency of the Republic is now regulating the use of cloud computing services through standards applicable to the entire Federal Public Administration (APF), which includes direct administration and public companies. In short, the main standard in force restricts APF agencies to the use of cloud computing service providers hosted in the national territory for the processing of confidential information. Despite the advances of recent years, compliance remains a challenge for federal public companies, which are compelled to innovate, given the limited provision of such services in the national territory. The objective of this work is to evaluate the impacts of legislation on the innovation objectives of federal public companies and to assess how approaches based on risk management disciplines would favor a greater balance between data sovereignty and the development of emerging technologies at a national level in innovation initiatives conducted by these public companies.