Uma abordagem para garantia da conformidade legal no planejamento de contratações de TI na administração pública federal

Abstract

Increasingly, Information Technology IT solutions support the business processes of organizations. The Federal Public Administration (APF) spends billions of reais per year in the acquisition and implementation of IT solutions, according to the Court of Audit (TCU). The Secretariat of Logistics and Information Technology (SLTI) of the Ministry of Planning, Budget and Management (PM) is responsible for regulating the IT acquisitions by APF. The SLTI instituted IN No. 04/2014 that defines a process for hiring IT solutions that must be followed by APF agencies. The IN nº 04/2014 specifies a set of good IT governance practices and defines the legal requirements (requirements, restrictions and guidelines) that must be met in the various stages of the IT acquisition process. The procurement process of IT solutions defined in IN nº 04/2014 consists of three steps: (1) procurement planning; (2) supplier selection; and (3) contract management. The steps of the process group activities that produce artefacts (documents) that are necessary to the procurement of IT solutions. These artefacts must comply with the legal requirements defined by the IN nº 04/2014. The Planning IT Solutions Procurement (PCTI) phase is the one that requires more effort and time due to the legal requirements that must be satisfied in the documents that are produced. Moreover, the milestone of PCTI phase, called Reference Term, guides the rest of the procurement process. In this context, the research question formulated is how to ensure legal compliance in the PCTI? As solution to the research question, this work proposes an approach to support compliance verification between artifacts produced during the PCTI and legal requirements defined by the IN 04/2014, using traceability techniques based on rules. The approach proposed aims to help with the work of the planning and procurement IT team (e.g. public managers and control agencies staff) in the management, monitoring and control of PCTI.