Gestão de requisitos legais com foco na conformidade dos sistemas com a legislação vigente

Abstract

Information systems play a vital role in supporting business processes of companies. Often, laws and regulations place restrictions on existing software systems and companies are required to develop complex systems that comply with current legislation. The legal requirements refer to the set of laws and regulations applicable to the domain of the software business to be developed. These requirements are highly sensitive to changes in legislation. Requirements traceability enables the tracking and description of the life of a requirement, from its origin to its implementation. The dynamism of laws requires a continuous adaptation of the legal requirements modeled. The losses made by an organization, which does not care about the legal compliance of its systems, can go from nancial losses to damages to its reputation. This paper presents a proposal for an approach capable of assisting software development teams in the veri cation and maintenance of systems compliance with current laws. Interviews were conducted with specialists in requirements to better understand the problem; Analysis of the approach through case studies, to evaluate its e ectiveness and understanding of the aws, improvements, disadvantages and advantages seized with the application of the proposed approach. It was observed that the management of requirements, especially through the use of traceability, can play a fundamental role in verifying the adequacy of the systems with the laws. The results obtained also demonstrate that the e ort expended by the team in the execution of the proposed approach can contribute to the promotion of the auditability of information systems.