INSS servers criticize internal changes, warn of security risks

Servers at Brazil's National Institute of Social Security (INSS) are voicing strong criticism over recent structural reorganizations implemented by the agency's presidency. The changes, which created and transformed information security and data intelligence coordination units, have sparked concerns among employees about the potential weakening of the institute's data security protocols.

Employees interviewed on condition of anonymity argue that placing IT security and data intelligence functions under newly formed or altered coordination units could compromise the confidentiality and integrity of sensitive data. They fear that these shifts may dilute responsibilities, potentially leading to a loss of organizational memory, interruptions in ongoing projects, duplicated efforts, inconsistent data indicators, and increased operational costs. The lack of clear delineation between the responsibilities of various coordinations and directorates raises questions about who would be accountable for cybersecurity incidents, vulnerabilities, or access control.

“

Altering this structure, especially without a transition plan and without utilizing the servers who developed these capabilities, could lead to a loss of organizational memory, interruption of initiatives, duplication of solutions, divergence of indicators, and increased costs.

The National Association of Social Security Analysts (ANASPS) has announced its intention to appeal to the Federal Court of Accounts (TCU) to challenge these changes. The association points to previous TCU decisions that have addressed issues related to IT operations within public institutions. ANASPS maintains that the previous structure was more secure and better equipped to ensure the continuity of projects and the effective use of artificial intelligence within the INSS.

Despite these server concerns, the INSS, through its press office, denies that the structural changes could be detrimental. The institute asserts that the alterations are "minor internal adjustments aimed at improving the agency's management." However, servers fear that the reorganization could negatively impact citizens through delays in benefit analysis, inconsistent decisions, and an increased risk of security incidents. They worry that instead of integrating systems, the INSS might revert to operating with fragmented administrative units, fostering conflicts of competence and diminishing control over strategic initiatives.

“

The ordinance that instituted the change 'promotes punctual internal adjustments with the objective of improving the agency's management.'