O papel da responsabilidade social corporativa no desenvolvimento de ações de cibersegurança: um estudo em Travel Techs de Natal-RN

Abstract

Continuous access to the internet has led to an increase in the generation of data between users and companies. This data includes information on tourist destinations, personal data, purchase history, bank and credit card details. The main characteristics of this data indicate vulnerability, due to the sensitivity of this information. This raises the question of data protection and privacy. Considering the possibility of information leaks, it is necessary to adopt measures to minimize the impact. To this end, Corporate Social Responsibility (CSR) has emerged, which deals with aspects that companies must develop in order to be a good corporate citizen. Therefore, the aim of the research is to characterize the role of Corporate Social Responsibility (consisting of legal, economic, ethical and philanthropic responsibility) in the development of cybersecurity actions in Travel Techs. The object of study is travel techs, which are companies that offer technological solutions to improve tourism processes. The fact that travel techs offer products and services online can be considered a risk agent for data breaches, so it is important to study what actions can be taken to protect them. The methodology used is based on qualitative research supported by Bardin's (2011) content analysis, with empirical research focusing on the analysis of multiple studies based on Yin (2003). After collection, the data was processed using Vosviewer software version 1.6.20. The sample is made up of aspiring startups linked to business incubators in the state of Rio Grande do Norte. The results revealed that, although the companies demonstrate a basic understanding of cybersecurity and their responsibilities to provide a safe online environment for their customers, there is a discrepancy in the level of awareness and preparation between them. However, it can be seen that companies that have already faced invasions or incidents have a high level of knowledge and adoption of technological mechanisms that mitigate the risks of violation, showing an adaptive reaction to the cyber threats faced.