Dr. Matheus Figueiredo

Session 9: Metrics-Driven Software Procurement: Strengthening Legal Governance, Risk Mitigation, and Cost Optimization through IFPUG Standards
Time: 3:50 pm – 4:20 pm

Session Abstract:
Software Factory procurement remains one of the greatest governance challenges for both public and private organizations. Traditional effort-based contracting models often result in budget overruns, ambiguous requirements, scope creep, contractual disputes, and limited auditability. These issues not only affect project delivery but also expose organizations to legal, financial, and compliance risks.

This presentation proposes a metrics-driven procurement framework grounded in the International Function Point Users Group (IFPUG) Function Point Analysis (FPA) standard, demonstrating how standardized functional measurement can strengthen legal governance throughout the software acquisition lifecycle. Rather than relying on subjective estimates of development effort, the proposed model establishes objective criteria for defining scope, pricing software based on functional size, measuring vendor productivity, and monitoring contractual performance through measurable service-level agreements (SLAs).

The presentation also explores how function point metrics contribute to procurement transparency, contractual certainty, compliance programs, and risk management by reducing discretionary decision-making and creating auditable procurement processes. The framework aligns technical measurement with governance principles, enabling organizations to improve accountability, optimize costs, mitigate contractual risks, and support evidence-based decision-making in software procurement.

Attendees will receive practical guidance for designing robust Software Factory Requests for Proposal (RFPs), establishing measurable procurement requirements, and implementing governance mechanisms that integrate financial control, legal certainty, compliance, and metrics-driven contract management.

Speaker Bio:
Matheus Souza de Figueiredo is a Brazilian attorney specializing in Digital Law, Data Protection and Privacy, Compliance, Risk Management, Tax Law, and the legal implications of emerging technologies. His professional activities combine legal practice, academic research, and the advancement of technology-related legal studies.

Throughout his career, Mr. Figueiredo has worked within the Brazilian Federal Public Prosecutor’s Office and the Judiciary, where he has contributed to legal research, judicial opinions, procedural drafting, and the analysis of complex civil, criminal, public, and tax law matters.

Mr. Figueiredo is the author of peer-reviewed scholarly publications in the fields of artificial intelligence, digital evidence, post-quantum cryptography, cybersecurity, privacy, and data protection. His research contributes to the legal debate on emerging technologies and digital governance.