Estratégias de gerenciamento de riscos em empresas de TIC: metodologias e benefícios para o desenvolvimento de software

Abstract

This Undergraduate Thesis (TCC) addresses the importance of risk management in Information and Communication Technology (ICT) companies and proposes a support structure to encourage the adoption of robust risk management methodologies. Initially, a comprehensive literature review was conducted to explore major frameworks and standards such as PMBOK, PRINCE2, ISO 31000, NIST, and COBIT, highlighting their specific structures and focuses. Subsequently, a detailed proposal was presented to assist ICT companies in implementing these methodologies, emphasizing the benefits of asset protection, regulatory compliance, business continuity, and competitive advantage. The research employed the bibliographic research technique to theoretically underpin the analysis and the proposed framework. The stages of defining the theme, identifying and selecting information sources, critical reading and analysis, synthesis of results, and citation of utilized sources were detailed. Additionally, related works were explored to provide a broader context and identify gaps in the existing literature. Suggestions for future research emphasize the importance of developing new technologies for risk management, creating robust governance policies and structures, and considering human and cultural aspects. The conclusion reaffirms the relevance of investing in effective risk management practices to ensure the success and sustainability of ICT companies.