Especificação dos requisitos de software de análise de risco para tomada de decisão de investimentos em tecnologia da informação

Nowadays, the Federal Public Administration is facing an increasingly common problem in the areas of information technology: The problem of managing unlimited demands with limited resources. The problems are many and range from insufficient human resources, maintenance of network infrastructure and especially the lack of financial resources. The latter leads the manager to a dilemma: He has the maintenance demand of their infrastructure and he does not have enough budget. To do it. Today, there is not a framework, a set of criteria or even a specific system to assist the administrator in the decision process for selecting the assets to be worked. This selection process takes place today, empirically, without a formal and automated methodological process of selecting assets for investment priority. Thus, this study aimed to identify risk analysis tools that could help the information technology manager in decision making for investments. The methodology used comprised exploratory research activities within a universe of worldwide use tools in the search for that answer the research context. The research resulted in the discovery of essential requirements for risk analysis from the perspective of investments. Thus, this research has identified specific criteria for the purposes of analysis, comes as functional requirements, data requirements and basic implementing rules to support the proposal to develop its own software, and all this work culminated in classification of these requirements and rules implementation for this system. Finally a case study was conducted within a limited universe with limited criteria and information technology assets in small quantities to demonstrate the applicability of the proposed methodology in this type of risk analysis. This methodology used the concept of multi-criteria analysis, and presented promising results in the establishment of a list prioritizing the implementation of investments in information technology in the federal public administration.