Abstract:
The Ministry of Labour and Employment created two regulations that aim to regulate the electronic registration of working time, which with the use of ICT targets to minimize the problems arising from the control of this record. The Regulation No. 1510 introduced the special equipment: Electronic Time Clock, which is a hardware embedding fiscal intelligence. However, the Regulation No. 373 allowed the use of alternative systems for working time, which could be software-based. However, this software must meet a series of requirements to legal compliance. The companies should incorporate the new requirements in their risk management, enforcing mechanisms of systems auditing. This paper presents a methodology for compliance assurance that highlights the design patterns and vulnerabilities founded in case studies. Among the main findings are best practices and technological mechanisms that minimize the risks of non-compliance with Brazilian regulations
Reference:
SANTOS, Alessandro Santiago dos; AVANÇO, Leandro; DOMINGUES, Maria Cristina Machado; VIRÍSSIMO, Denis Bruno . Systems auditing for alternative working time systems : best practices, vulnerabilities and requirements for compliance with brazilian regulations. In: INTERNATIONAL CONFERENCE ON INFORMATION SYSTEMS AND TECHNOLOGY MANAGEMENT, 11., 2014, São Paulo. Proceedings… 20 p.
The Ministry of Labour and Employment created two regulations that aim to regulate the electronic registration of working time, which with the use of ICT targets to minimize the problems arising from the control of this record. The Regulation No. 1510 introduced the special equipment: Electronic Time Clock, which is a hardware embedding fiscal intelligence. However, the Regulation No. 373 allowed the use of alternative systems for working time, which could be software-based. However, this software must meet a series of requirements to legal compliance. The companies should incorporate the new requirements in their risk management, enforcing mechanisms of systems auditing. This paper presents a methodology for compliance assurance that highlights the design patterns and vulnerabilities founded in case studies. Among the main findings are best practices and technological mechanisms that minimize the risks of non-compliance with Brazilian regulations
Reference:
SANTOS, Alessandro Santiago dos; AVANÇO, Leandro; DOMINGUES, Maria Cristina Machado; VIRÍSSIMO, Denis Bruno . Systems auditing for alternative working time systems : best practices, vulnerabilities and requirements for compliance with brazilian regulations. In: INTERNATIONAL CONFERENCE ON INFORMATION SYSTEMS AND TECHNOLOGY MANAGEMENT, 11., 2014, São Paulo. Proceedings… 20 p.
