Avaliação e resposta ao risco de TI na prevenção de fraudes no sistema de transporte público coletivo do Distrito Federal

• Ano de defesa: 2018
• Autor(a) principal: Ramos, Luciano Helou
• Orientador(a): Souza Neto, João
• Tipo de documento: Dissertação
• Tipo de acesso: Acesso aberto
• Idioma: por
• Instituição de defesa: Universidade Católica de Brasília
• Programa de Pós-Graduação: Programa Stricto Sensu em Gestão do Conhecimento e da Tecnologia da Informação
• Departamento: Escola de Educação, Tecnologia e Comunicação
• País: Brasil
• Palavras-chave em Português: Fraudes; Gestão de risco; Passe livre estudantil; Sistema de bilhetagem automática; Sistema de transporte público coletivo
• Palavras-chave em Inglês: Public transportation system; Automatic ticketing system; Risk management; Frauds
• Área do conhecimento CNPq: CNPQ::CIENCIAS SOCIAIS APLICADAS::CIENCIA DA INFORMACAO
• Link de acesso: https://bdtd.ucb.br:8443/jspui/handle/tede/2548

Passe Livre Estudantil (PLE), a governmental tariff benefit established by the Federal District of Brazil, was created with the goal to fulfill social interests closely related to the rights to transportation and to education. The granting of PLE, as in any administrative act providing for the use of budgetary funds for financing public expenditure, must be supported by instruments that enable public sector managers to ensure the upholding of its lawfulness, legitimacy and economic efficiency. In this regard, the purpose of this research was to contribute to the prevention of frauds connected to IT-related risk in the stages of registration, granting and use of PLE in the framework of the Public Transportation System of the Federal District (STPC-DF). The methodological approach of the investigation consisted in the single-case study of the Automatic Ticketing System (Sistema de Bilhetagem Automática - SBA) of STPC-DF, which is under the stewardship of local state-owned company Transporte Urbano do Distrito Federal - DFTrans. Quantitative and qualitative methods were used, by means of documentary analysis, direct observation, and interviews with a focal group. In this process, the professional guide COBIT 5 for Risk was used for guidance on the development and application of an IT-related risk scenario in STPC-DF SBA, which made possible the identification and analyses of IT-related risks enabling fraudulent activities, as well as the outline of adequate responses for them. Lastly, this study proposes mechanisms for the management of IT-related risks involved in the granting of this governmental subsidy. The conclusions presented in this study may hopefully contribute to fraud prevention and, consequently, to the enforcement of the right not to be charged for transportation tariffs of those students who are legally entitled to this social benefit.