Legacy systems modernization and it governance in financial institutions: an analysis on robotic process automation (RPA) and digital compliance
Legacy systems modernization and it governance in financial institutions: an analysis on robotic process automation (RPA) and digital compliance
DOI:
https://doi.org/10.51473/rcmos.v1i2.2025.2174Keywords:
IT Governance. Legacy Systems. RPA. Digital Compliance. Managerial Processes.Abstract
The longevity of financial institutions in the digital economy era intrinsically depends on the ability to overcome technological obsolescence without compromising data integrity and regulatory compliance. This scientific article proposes an exhaustive and multidisciplinary investigation into the challenges of modernizing legacy systems in banking environments, focusing on the application of Robotic Process Automation (RPA) and the structuring of IT governance frameworks. The adopted methodology is based on a narrative literature review, correlating Hammer's process reengineering postulates (1990) with COBIT 2019 governance guidelines and the ISO 27000 family information security standards. The study is structured into five high-density thematic axes, dissecting everything from the architecture of legacy systems and their operational risks, the strategic implementation of RPA for efficiency, digital compliance management and data protection, system integration via APIs and microservices, to the Strategic Business-IT Alignment. The theoretical results demonstrate that modernization is not merely a software update, but a restructuring of processes that, when well-governed, reduces operational costs (OPEX) and mitigates systemic risks. It is concluded that the business analyst acts as the architect of this transformation, ensuring that technological innovation remains subordinate to the institution's strategic and regulatory objectives.
Downloads
References
CALCOTE, L.; BUTCHER, Z. Istio: up and running. Sebastopol: O'Reilly Media, 2019.
COBIT 2019. COBIT 2019 framework: introduction and methodology. Schaumburg: ISACA, 2018.
EVANS, E. Domain-driven design: tackling complexity in the heart of software. Boston: Addison-Wesley, 2003.
FOWLER, M. Strangler fig application. MartinFowler.com, 2004.
HAMMER, M. Reengineering work: don't automate, obliterate. Harvard Business Review, v. 68, n. 4, p. 104-112, 1990.
INTERNATIONAL ORGANIZATION FOR STANDARDIZATION. ISO/IEC 27001: information technology – security techniques – information security management systems – requirements. Geneva: ISO, 2013.
KIM, G.; DEBOIS, P.; WILLIS, J.; HUMBLE, J. The DevOps handbook: how to create world-class agility, reliability, and security in technology organizations. Portland: IT Revolution Press, 2016.
LAUDON, K. C.; LAUDON, J. P. Management information systems: managing the digital firm. 13. ed. Boston: Pearson, 2014.
MOFFITT, K. C.; ROZARIO, A. M.; VASARHELYI, M. A. Robotic process automation for financial and accounting applications. Journal of Emerging Technologies in Accounting, v. 15, n. 1, p. 1-10, 2018. DOI: https://doi.org/10.2308/jeta-10589
PRESSMAN, R. S. Engenharia de software: uma abordagem profissional. 8. ed. Porto Alegre: McGraw-Hill, 2016.
WEILL, P.; ROSS, J. W. IT governance: how top performers manage IT decision rights for superior results. Boston: Harvard Business School Press, 2004.
WILLCOCKS, L.; LACITY, M. Service automation: robots and the future of work. Warwickshire: Steve Brookes Publishing, 2016.
Downloads
Published
Issue
Section
Categories
License
Copyright (c) 2025 Vinicius Pereira Lensyk (Autor)

This work is licensed under a Creative Commons Attribution 4.0 International License.

