Návrh a implementace webové aplikace pro efektivnější řešení IT compliance procesů

Using specialized compliance management software to ensure IT compliance is becoming increasingly important. Such software can help companies deal with the growing number of regulatory requirements, enabling them to centralize and automate compliance processes, thereby increasing efficiency and reducing the risk of non-compliance. The GMS department at Siemens, s.r.o. is primarily involved in application development. These applications must comply with regulations stemming from internal IT compliance processes. IT managers from GMS are challenged with managing IT compliance, related documentation, and meeting the requirements of the various IT compliance processes. These issues can be resolved by implementing compliance software, which is currently lacking at GMS. The aim of the thesis is to design, implement and validate a solution in the form of a web application to support selected IT compliance processes related to the security of corporate application software at Siemens, s.r.o. The sub-objective of the thesis is to investigate the already existing compliance management software, as well as to analyse the selected IT compliance processes, their information support in the company and then to identify the potential for their improvement. Informal interviews with relevant employees as well as a review of the current documentation and available information in the company, are used throughout the application development process. In the application development, principles of the agile approach Kanban are used. A standardized questionnaire and semi-structured interviews with the application requestor, i.e., the company’s management, are used to validate the solution with the users. The application is tested using unit tests. The result of the work is a functional web application for supporting IT compliance processes that meets the requirements of senior managers. The web application has simplified and streamlined the management of IT compliance, related documentation, and the fulfilment of requirements resulting from IT compliance processes.