Metodologia para Avaliar o Grau de Maturidade da Gerência de Riscos

Abstract

O processo de gerenciamento de riscos (GR) compreende atividades coordenadas para identificar, analisar, avaliar, tratar, comunicar e monitorar os riscos dos projetos. As organizações que desejam implementar estas atividades ao seu processo de desenvolvimento de software (PDS) devem conduzir uma série de ações para aderir aos padrões existentes. No entanto, não foram encontradas referências para modelos que permitam avaliar o PDS por meio de questionamentos e apresentam uma visão clara das deficiências deste processo. Desta forma, este estudo tem como objetivo, apresentar o questionário de avaliação diagnóstica que é parte do framework GAIA Riscos, bem como a metodologia de cálculo e exposição dos resultados encontrados.

Improvements on diagnostic assessment questionnaires of Maturity Level Management with feature selection

“…Therefore, the same question can influence one or more services at the same time. Table 2 presents the relationship matrix between a question and the weights it exerts on each service [7].…”

“…It is necessary to calculate the product between the weight of the question in the service and the coefficient (α) related to the selected alternative. The final score is obtained by the addition of these products for each service [7].…”

“…The final score is positioned in the interval described, determining the percentage of attendance of each service. Therefore, the maturity level of the organization is defined based on the service with the lowest attendance rate and classified according to Table 3 for the approach of this paper [7].…”

“…Considering the Brazilian national scenario, in the last few years, some studies have proposed new diagnostic evaluation tools -diagnostic assessment questionnaires (DAQ) -for maturity models through the use of questionnaires, which suit the reality of software development in some regions of Brazil [4] [7][10] [28]. However, DAQ are composed of a large number of questions, many of them homologous and redundant inter and intra questionnaires.…”

“…Through computational intelligence and based on the hypothesis that there are redundant questions in different DAQ from different areas of an organization, we propose to analyze four questionnaires (Risk Management [7], Infrastructure [10], Governance [4] and Service Catalog [28]) and to evaluate the most relevant questions to reduce the number from them guided by results obtained from the whole questions. It is important to highlight the fact of we are facing all of four DAQ at once, a challenge posed by a real-life scenario.…”