Investments in Information Security is already on the list of priorities of CIOs of large corporations. This concern is already being reality in small and medium enterprises.

Arrange to grow in a sustainable manner is a common goal of organizations, small and medium businesses. However to take the first step, it is clear that such distance companies still need to go, since the creation of formal business plan, to prepare for any uncertainties, developing a governance model consistent with the future plans, identify and manage the risks associated with the business, the assessment of potential risks, will not go unnoticed themes linked to: actions of hackers and viruses, loss of information of customer, operational availability, and ethical conduct of partners and employees, intellectual property, spying on information leaks and even fraud.

Align to pursuit growth, it is increasingly important that the technology is embedded in organizational life and the quest for preservation is directly proportional to its investment capacity, maintenance and protection of the technology, processes, people and also the physical environment.

Currently companies, especially the SMEs can no longer enjoy a comfort zone for too long. The technology, globalized world, the economy and government policies allow the entry of competitive firms in the market every day. In small businesses, the working capital is limited, the credit lines are not as available as in larger companies.

Even in solid midsize companies, with over 20 years of existence, however they kept their family run, should start worrying about competing with new market segments in certain international investments of large multinational companies that want to leverage demand of domestic market that is already a reality.

This competition makes use of Information Technology, robust and totally secure, which as we have seen, are not available on our SMEs. Competitive advantage is what every company hopes. However, not all know the means to achieve this goal. IT, armed with strategic tools, can provide this environment. However it cannot be more detached from the Governance Information Technology, risk increases every day in this scenario as competition is globalized.

The concept of Trade Marketing and CRM Should be used widely and broadly for business survival, that today translates into investments in applications, integrated systems throughout the production chain, big data, cloud hosting solutions, etc.. The dynamics of everyday life of large companies should also start becoming part of the reality of SMEs, much more accessible than in the past in every way, enables smaller companies to become more competitive in the domestic market.

The integrated view of information security to these new technologies that become part of competition, can have the same tools, however guarantee, reliability, availability, and integrity of information that this vision will be distributed and managed across the supply chain, from the industry to the point of sale. And yet to receive feedback from shoppers and consumers feeding the data analysis process in reverse. Then yes, definitely will be competitive and can be obtained through the Governance of Information Security.

In various methodologies, best practice models, frameworks and standards of ICT, find a topic that is very common, administration tool based on the PDCA quality.

This tool aims to ensure the achievement of goals required for the survival of the business and though simple, is a step forward without limit to effective planning.

This cycle is required for all experiments that are constantly revised, so the adjustments are performed and the learning with errors is possible. This way, you can always identify needs for improvement, particularly in SMEs where resources in all senses are more scarce, and should thus achieve the best possible productivity processes deployed.

Several factors influence the implementation of an Governance Information Security, beginning by naming a nasty somewhat strange reality of Small and Medium enterprises. The profile of the IT professional is another factor which is decisive for the success of a project of this level. In addition to technical skills, you need other features like profile negotiator and leadership regardless of who occupies hierarchy.

We use the basic models, standards and practices, without forgetting to use only what fit the reality of the company concerned, riding without any shame, its management model.

The competitive advantage that will be created following implementation of the model will not only meet the market but will also foster growth, visibility and credibility of IT internally in all their relationships, helping achieve the level of respect where IT is constantly sought to guide and assist in strategic settings.

A variable common to all areas of knowledge that is to be a leader, negotiator and good coach, you need to like what you do. Thus the challenges can be achieved.