RESUMO Contexto: a ambidestria é uma capacidade dinâmica que busca equilibrar iniciativas de exploitation e exploration. O desenvolvimento conjunto de exploitation e exploration pode ser alcançado por meio da ambidestria dinâmica. As discussões teóricas envolvendo a relação entre os conceitos de ambidestria e capacidades dinâmicas (CDs) já foram desenvolvidas na literatura. Entretanto, a forma como as três abordagens ambidestras (estrutural, contextual e sequencial) são baseadas em CDs ainda precisa ser observada pelos pesquisadores. Objetivo: o objetivo do estudo é propor um modelo teórico hipotético que explique a influência dos variados tipos de ambidestria organizacional (estrutural, contextual e sequencial) no desenvolvimento das CDs e sua relação com o desempenho organizacional. Metodologia: o estudo foi desenvolvido por meio de uma ampla revisão sistemática da literatura orientada por uma lógica indutiva, epistemologia interpretativa e abordagem qualitativa. Resultados: as análises e discussões possibilitaram a apresentação de um modelo teórico hipotético de ambidestria dinâmica que envolve nove construtos e onze hipóteses. Conclusão: acreditamos que o nosso estudo contribui teoricamente para o campo das estratégias organizacionais e pode possibilitar estudos alinhados com os conceitos de ambidestria dinâmica e CDs.

ABSTRACT Context: ambidexterity is a dynamic capability that seeks to balance exploitation and exploration initiatives. The joint development of exploitation and exploration can be achieved through dynamic ambidexterity. Theoretical discussions involving the relationship between the concepts of ambidexterity and dynamic capabilities (DCs) have already been developed in literature. However, the way the three ambidextrous approaches (structural, contextual, and sequential) are based on DCs still needs to be observed by researchers. Objective: this study aims to propose a conceptual and theoretical hypothetical model that explains the influence of various types of organizational ambidexterity (structural, contextual, and sequential) on the development of DCs and their relation to organizational performance. Methodology: the study was developed through an extensive systematic literature review guided by an inductive logic, interpretive epistemology, and qualitative approach. Results: the analyses and discussions made it possible to present a theoretical hypothetical model of dynamic ambidexterity that involves nine constructs and eleven hypotheses. Conclusion: we believe that our study contributes theoretically to the field of organizational Strategies and can enable studies aligned with the concepts of dynamic ambidexterity and DCs.

ABSTRACT This study analyzed Remotely Piloted Aircraft System (RPAS) deployment in the Regional Services of Aeronautical Accidents Investigation and Prevention (SERIPA – Brazil) as a support tool to investigate aviation accidents. Such review is justified by the acquisition and use of this equipment and new technology by investigators since 2017. Research aim was to analyze the perception of SERIPA investigators regarding the usefulness and ease of use of the RPAS equipment. We applied an adaptation of the Theoretical Model of Technology. Methodologically, the study was characterized as exploratory and carried out through an inductive logic and qualitative approach. A case study has been done with 14 investigators belonging to six Brazilian SERIPA units. In conclusion, the respondents deem the RPAS to be useful for aircraft accident investigation, and the equipment is of easy use. RPAS was observed as a tool capable of replacing manned aircraft in some crash sites. The external variable, i.e. crash site characteristics, emerged as a factor that influences the use of RPAS, as well as the transport of RPAS in commercial aircraft.

RESUMEN Este estudio tiene como objetivo describir y comprender la realidad de las organizaciones brasileñas en términos de cumplimiento de la Ley General de Protección de Datos de Carácter Personal (LGPD). Este enfoque se justifica por las normas establecidas por el Estado brasileño para la manipulación, el tratamiento y el almacenamiento de datos personales por parte de las organizaciones. En este sentido, se discute la capacidad de las organizaciones para cumplir con los marcos regulatorios establecidos por la LGPD (Ley Nº 13.709/2018). Para lograr el objetivo propuesto, el estudio se basa en la NBR ISO/IEC 27001, NBR ISO/IEC 27002 y la Ley No. 13.709/2018. En cuanto al objetivo, la investigación es descriptiva con un enfoque cualitativo y se realiza a través de múltiples estudios de caso. Los datos se recogieron mediante entrevistas semiestructuradas con siete profesionales responsables de la recogida, manipulación o almacenamiento de datos de empresas de diferentes tamaños. El estudio fue realizado dos meses (oct/2018) después de la sanción de la LGPD por la presidencia de la República de Brasil, caracterizada como de tipo transversal. El estudio mostró que las empresas no están preparadas para cumplir con los marcos regulatorios establecidos por la LGPD, lo que requiere considerables cambios técnicos y de gestión en las áreas de Tecnología de la Información y Seguridad de la Información.

ABSTRACT This study aims to describe and understand the reality of Brazilian organizations in terms of compliance with the General Law on the Protection of Personal Data (LGPD). Such an approach is justified by the regulations established by the Brazilian State for the manipulation, processing and storage of personal data by organizations. In this sense, the capacity of organizations to meet the regulatory frameworks established by the LGPD (Law No. 13.709/2018) is discussed. In order to achieve the proposed intent, the study is based on NBR ISO/IEC 27001, NBR ISO/IEC 27002 and Law No. 13.709/2018. As for the objective, the research is descriptive with a qualitative approach and conducted through multiple case studies. The data were collected via semi-structured interviews with seven professionals responsible for the collection, manipulation or storage of data from companies of different sizes. The study was conducted two months (Oct/2018) after the sanction of the LGPD by the presidency of the Brazilian Republic, characterized as a cross-sectional type. The study showed that the companies are not prepared to meet the regulatory frameworks established by the LGPD, requiring considerable technical and management changes in the areas of Information Technology and Information Security.

RESUMO Este estudo tem como objetivo descrever e compreender a realidade de organizações brasileiras quanto à adequação à Lei Geral de Proteção de Dados Pessoais (LGPD). Tal abordagem se justifica mediante regulamentações estabelecidas pelo Estado brasileiro para a manipulação, tratamento e armazenamento de dados pessoais por organizações. Nesse sentido, discute-se a capacidade das organizações de atender aos marcos regulatórios estabelecidos pela LGPD (Lei no 13.709/2018). Para alcançar o intento proposto, o estudo está fundamentado na NBR ISO/IEC 27001, NBR ISO/IEC 27002 e na Lei no 13.709/2018. Quanto ao objetivo, a pesquisa é descritiva com abordagem qualitativa e realizada por meio de estudo de casos múltiplos. Os dados foram coletados via entrevistas semiestruturadas com sete profissionais responsáveis pela coleta, manipulação ou armazenamento de dados de empresas de diferentes portes. O estudo foi realizado dois meses (out/2018) após sanção da LGPD pela Presidência da República do Brasil, caracterizando-se como do tipo corte transversal. O estudo demonstrou que as empresas não estão preparadas para atender aos marcos regulatórios estabelecidos pela LGPD, urgindo por consideráveis mudanças técnicas e de gestão nas áreas de tecnologia da informação e segurança da informação.

ABSTRACT This article aims at analyzing the factors which influence the staff of the Brazilian Air Force Information Technology Board - DTI in relation to the understanding of the application of the Information Security Management practices. This attempt was based on the hypothetical-deductive method and, as to its objective, it was descriptive in nature. As to the approach of the research problem, it was quantitative in nature. In order to achieve the proposed objective, an adaptation of the Theoretical Technology Acceptance Model - TAM, which allowed the analysis of the relation between sociodemographic profile, perceived ease of use, perceived usefulness, attitude and behavior of the users, and the level of understanding of the Information Security practices. The survey was conducted with 59 military servants and civilians which are part of the Brazilian Air Force Information Technology Board, to whom a questionnaire was applied, submitted and approved by the Committee of Ethics in Research (CAAE: 62636016.7.0000.5111), which was based on the precepts of ISO/IEC 27001 (2013) and 27002, which deal, respectively, with the Information Security Management system and with the code of practice for Information Security controls. Once the data were gathered, they were tabulated and statistically analyzed, which enabled the demonstration of the influence of sociodemographic and behavioral factors and of the precepts of the TAM in the perception of the Information Security practices by the DTI staff.