Desafios de compliance em cibersegurança: um framework para adoção estruturada de Sistema de Gerenciamento de Eventos e Informações de Segurança na Justiça Eleitoral

Abstract

The digital transformation of the Brazilian Electoral Justice system presents significant challenges related to information security, cybersecurity, and regulatory compliance, especially in adopting Security Information and Event Management (SIEM) systems. This article aims to address this gap by proposing a compliance framework to guide the selection and implementation of SIEM solutions within the Electoral Justice system. Through a review of 41 legal documents from regulatory agencies such as the CNJ, TSE, and GSI, a systematic investigation was conducted. The outcome is a framework organized into five thematic areas: (1) Governance and Strategic Management; (2) Data Protection and Governance; (3) Risk Management and Business Continuity; (4) Audit, Logs, and Transparency; and (5) Incident Management and Response. This framework simplifies the complex regulatory landscape into a practical tool, providing clear Checkpoints to ensure that the adoption of a SIEM is a technical decision that complies with legal requirements, thereby enhancing the cybersecurity and institutional integrity of the electoral process as a whole.