Gestão de riscos em licitações de tecnologia da informação: um estudo de caso no Senado Federal

• Ano de defesa: 2025
• Autor(a) principal: Soares, David Pinto
• Orientador(a): Silva, Ana Paula Bernardi da
• Tipo de documento: Dissertação
• Tipo de acesso: Acesso aberto
• Idioma: por
• Instituição de defesa: Universidade Católica de Brasília
• Programa de Pós-Graduação: Programa Stricto Sensu em Governança, Tecnologia e Inovação
• Departamento: Escola de Educação, Tecnologia e Comunicação
• País: Brasil
• Palavras-chave em Português: Gestão de riscos; Tecnologia da informação; Licitações públicas; Governança de TI; Lei 14.133/2021
• Palavras-chave em Inglês: Risk management; Information technology; Public procurement; IT governance; Law 14.133/2021
• Área do conhecimento CNPq: CNPQ::CIENCIAS SOCIAIS APLICADAS::ADMINISTRACAO
• Link de acesso: https://bdtd.ucb.br:8443/jspui/handle/tede/3798

This study addresses risk management in Information Technology (IT) procurement with a focus on the Federal Senate, aiming to analyze current practices and propose improvements aligned with the international ISO 31000 framework and Brazilian legislation (Law No. 14,133/2021). It starts from the strategic importance of IT governance in the public sector, highlighting the complexity of IT contracts in public institutions amid rapid technological evolution and the need for transparency and efficiency in public resource use. The research adopts a qualitative approach based on literature review, document analysis, and semi structured interviews with strategic IT managers at the Federal Senate. It seeks to identify key challenges, gaps, and best practices in risk management throughout the public procurement lifecycle, from planning to contract execution. Data were analyzed using content analysis techniques and contrasted with specialized literature. Results show that despite normative and institutional advances, effective implementation of risk management faces cultural resistance, technical limitations, and integration difficulties among areas. Formalized processes, continuous staff training, strong senior management involvement, and systematic use of tools like risk matrix are recommended. The work proposes practical suggestions to strengthen IT procurement governance, reduce vulnerabilities, and promote greater efficiency, transparency, and sustainability in public acquisitions at the Senate. Besides theoretical contribution to public sector IT governance and risk management, the research offers a technical product to support internal process improvement at the Senate, serving as a reference for other public institutions. Emphasis is placed on the alignment between international standards and national legislation, as well as the need for adaptive strategies in a dynamic technological and regulatory environment.