IT GOVERNANCE AND STANDARDIZATION: THE RISK OF IRREGULAR SYSTEMS IN THE MILITARY POLICE OF PARANÁ

Abstract

This article analyzes the impacts and risks of irregular and unsupervised systems development, a phenomenon known as Shadow IT, within the Military Police of Paraná (PMPR). The adoption of technological solutions without the approval of the competent central organ constitutes a severe institutional problem, as it may violate the administrative logic of impersonality, generates technical liabilities, and exposes the Corporation to cyber vulnerabilities and potential violations of the General Data Protection Law (LGPD). Given this problem, the central objective of this study is to analyze the operational fragilities resulting from this practice and propose a set of applicable inspection, control, and doctrinal awareness actions to mitigate irregular development. Methodologically, the research is classified as applied and qualitative, based on a literature review and the documentary analysis of the General Command Ordinance No. 131/2024 and Guideline No. 015/2024. The analyses demonstrate that the Corporation possesses regulatory mechanisms and institutional technological resources destined for the standardization and governance of software development, leaving the challenge of overcoming the cultural barrier to ensure compliance. It is concluded that combating Shadow IT requires the adoption of joint measures between the Directorate of Technology and Innovation (DTI) and the other units of the Corporation, such as fostering regulated decentralized development, training local IT Managers, and including governance in training curricula, ensuring interoperability and the uninterrupted continuity of police services.