Última alteração: 2014-08-20
Resumo
A financial institution is exposed to many types of risks, including the risks involved in IT projects. In 2012 the banks invested US$ 8.04 billion in technology, so these risks must be properly managed. The literature presents several risks management models where the process of risk identification is essential and Risk Register can be used as a control tool. How is the Risk Register being used in an organization of the banking sector and is there any relationship between the amount of registered risks and the project time performance? This relationship was studied using the technique of correspondence analysis and a sample of 8,794 software development projects of one of the largest Banks in Brazil. The results showed the absence of a risk management culture in the organization and a strong relationship between the variables (projects with more risks registered had the worst time performance). The study suggests the use of a guide from the Institute of Internal Auditors to assist in identifying and assessing risks of future projects.
Full Paper PDF: http://www.contecsi.fea.usp.br/envio/11contecsi-files/papers/975/submission/director/975-2563-1-DR.pdf