Information and Communication Technology (ICT) Governance Processes: A Case Study
Edna Dias Canedo,
Ana Paula Morais do Vale,
Rafael Leite Patrão,
Leomar Camargo de Souza,
Rogério Machado Gravina,
Vinicius Eloy dos Reis,
Fábio Lúcio Lopes Mendonça,
Rafael T. de Sousa
Affiliations
Edna Dias Canedo
Department of Computer Science, University of Brasília (UnB), P.O. Box 4466, Brasília DF CEP 70910-900, Brazil
Ana Paula Morais do Vale
National Science and Technology Institute on Cyber Security, Department of Electrical Engineering, University of Brasília (UnB), P.O. Box 4466, Brasília DF CEP 70910-900, Brazil
Rafael Leite Patrão
National Science and Technology Institute on Cyber Security, Department of Electrical Engineering, University of Brasília (UnB), P.O. Box 4466, Brasília DF CEP 70910-900, Brazil
Leomar Camargo de Souza
Department of Computer Science, University of Brasília (UnB), P.O. Box 4466, Brasília DF CEP 70910-900, Brazil
Rogério Machado Gravina
National Science and Technology Institute on Cyber Security, Department of Electrical Engineering, University of Brasília (UnB), P.O. Box 4466, Brasília DF CEP 70910-900, Brazil
Vinicius Eloy dos Reis
General Coordination of Information Technology (CGTI), Administrative Council for Economic Defense (CADE), Brasília DF CEP 70770-504, Brazil
Fábio Lúcio Lopes Mendonça
National Science and Technology Institute on Cyber Security, Department of Electrical Engineering, University of Brasília (UnB), P.O. Box 4466, Brasília DF CEP 70910-900, Brazil
Rafael T. de Sousa
National Science and Technology Institute on Cyber Security, Department of Electrical Engineering, University of Brasília (UnB), P.O. Box 4466, Brasília DF CEP 70910-900, Brazil
Information and Communication Technology (ICT) Governance is increasingly necessary and present in organizations aiming to improve the maturity of their ICT processes. This paper presents an analysis of the ICT Governance processes of a Brazilian Federal Public Administration agency. To assess the maturity of the ICT Governance processes, we surveyed and diagnosed the processes performed by the agency and organized a series of meetings/discussions to assist in the improvement and modeling of the processes related to the ICT Contract Planning process. As a result, we proposed improvements and identified the maturity level of the existing ICT processes, also assessing the awareness of employees of the General Coordination of Information Technology regarding these processes. Our findings reveal that the agency still needs to implement the following processes: (1) ICT People Management; (2) Business Process Modeling (Automated/to Automate); (3) Change Management; (4) Execution Monitoring of the ICT Projects and Services Portfolio; and (5) ICT Service Continuity Management. We also identified several artifacts that need to be implemented by the agency in different processes and collected survey participants’ suggestions about new processes to improve the maturity in ICT Governance.