Proposta de modelo de gestão de riscos para uma IFES visando a realização de auditoria baseada em riscos

Organizations are susceptible to the occurrence of many events that may affect the achievement of their objectives. As a result, Brazilian Public Administration supervisory bodies have required institutions to adopt risk management policies. Given the large number of recommendations issued by Federal Audit Court (TCU) to various Federal Institutions of Higher Education (IFES) in this area, it is proposed a risk management model for Universidade Federal do Rio Grande do Norte (UFRN). This is an applied, exploratory and qualitative study. Regarding to technical procedures, it is characterized as documentary analysis, bibliographical research, case study and action research. The bibliographical research was used to support the elaboration of the Risk Management Guide for Federal Institutions of Higher Education (GERIFES). The documentary analysis, in turn, was used with the aim of knowing the organizational structure and the university´s macroprocesses. The author works in the university internal auditing department and shares the same problem. This characterizes the work as an action research. The case study supported both the elaboration of the guide and the simulation of the specific functionality for the university information system, demonstrated through the User Manual Module "Risk Management" proposed for the Integrated System of Property, Administration and Contracts (SIPAC). This manual has been prepared in order to facilitate the use of this tool if it will be incorporated into the university information system. As research results, a risk management model for UFRN was elaborated and a simulation of an informational tool, which is able to manage risks related to events that may affect the achievement of institutional objectives, was provided to the university administration.

Aspectos do gerenciamento de riscos de tecnologia da informação nas empresas: um estudo de caso múltiplos

The information technology - IT- benefits have been more perceived during the last decades. Both IT and business managers are dealing with subjects like governance, IT-Business alignment, information security and others on their top priorities. Talking about governance, specifically, managers are facing it with a technical approach, that gives emphasis on protection against invasions, antivirus systems, access controls and others technical issues. The IT risk management, commonly, is faced under this approach, that means, has its importance reduced and delegated to IT Departments. On the last two decades, a new IT risk management perspective raised, bringing an holistic view of IT risk to the organization. According to this new perspective, the strategies formulation process should take into account the IT risks. With the growing of IT dependence on most of organizations, the necessity of a better comprehension about the subject becomes more clear. This work shows a study in three public organizations of the Pernambuco State that investigates how those organizations manage their IT risks. Structured interviews were made with IT managers, and later, analyzed and compared with conceptual categories found in the literature. The results shows that the IT risks culture and IT governance are weakly understood and implemented on those organizations, where there are not such an IT risk methodology formally defined, neither executed. In addition, most of practices suggested in the literature were found, even without an alignment with an IT risks management process

Sistemas de gerenciamento de bibliotecas: riscos decorrentes do processo de migração de dados

This work aims to analyze risks related to information technology (IT) in procedures related to data migration. This is done considering ALEPH, Integrated Libray System (ILS) that migrated data to the Library Module present in the software called Sistema Integrado de Gestão de Atividades Acadêmicas (SIGAA) at the Zila Mamede Central Library at the Federal University of Rio Grande do Norte (UFRN) in Natal/Brazil. The methodological procedure used was of a qualitative exploratory research with the realization of case study at the referred library in order to better understand this phenomenon. Data collection was able once there was use of a semi-structured interview that was applied with (11) subjects that are employed at the library as well as in the Technology Superintendence at UFRN. In order to examine data Content analysis as well as thematic review process was performed. After data migration the results of the interview were then linked to both analysis units and their system register with category correspondence. The main risks detected were: data destruction; data loss; data bank communication failure; user response delay; data inconsistency and duplicity. These elements point out implication and generate disorders that affect external and internal system users and lead to stress, work duplicity and hassles. Thus, some measures were taken related to risk management such as adequate planning, central management support, and pilot test simulations. For the advantages it has reduced of: risk, occurrence of problems and possible unforeseen costs, and allows achieving organizational objectives, among other. It is inferred therefore that the risks present in data bank conversion in libraries exist and some are predictable, however, it is seen that librarians do not know or ignore and are not very worried in the identification risks in data bank conversion, their acknowledge would minimize or even extinguish them. Another important aspect to consider is the existence of few empirical research that deal specifically with this subject and thus presenting the new of new approaches in order to promote better understanding of the matter in the corporate environment of the information units

Análise da gestão da cadeia de suprimentos de um supermercado varejista através da utilização do modelo SCOR

In the last decade the complexity of the environment in which organizations are embedded increased dramatically, having on one side the increasingly demanding consumers in regard to the quality and value of the product and the other companies with the need to reduce operating costs in order to achieve greater profitability, without this there is a downturn in growth or market share powers. In this context the necessity of effectively structuring actions relating to the line with the operational work processes so that business objectives are achieved organizational strategic planning, ensuring the competitiveness of the organization. This study aims to analyze how you have made the management of the supply chain in a grocery retailer in the light of guidelines of Supply Chain Management by using the SCOR model. For realization of this study a survey was needed, classified according to their goals, exploratory and descriptive as to its procedure, document, field and case study. Thus, the processing of data will be qualitative merit, using the thematic categorical analysis of Bardin (1977). Thus, to obtain data interviews together the operational and strategic management of a company that was named Supermarket Omega were performed. After analyzing the information obtained is perceived that there is an effort of the organization enhance its management of the supply chain. However, there is a lack of alignment between the various areas that compose it. About their work processes, we stress that the focus of the company is still very directed on sailing than profitability, although it is undergoing a transformation in its organizational culture However, records the existence of many improvement projects in developing. Thus, it can be noticed that there is some consistency between the assumptions of the SCOR model and applied within the supply chain Omega Supermarket, although a greater effort to better align with the model still needs to be studied