Method for the Development of Biometric Systems Based on Scrum and ISO/IEC 24745 Standard

Biometric systems play a crucial role in institutions where security is a priority. However, there is currently no specific guideline addressing security deficiencies during their development. This study proposes an agile method for the development of biometric systems, designed to meet the strict security and privacy requirements of the ISO/IEC 24745 standard. The method combines the five phases of the Scrum methodology (initiation, planning, implementation, retrospective, and release), 19 processes from the Scrum Body of Knowledge Guide (SBOK), 120 best practices (ABP), and 19 specific activities aimed at meeting the requirements of the standard. To evaluate its effectiveness, two biometric systems were developed: one for prison record management, using the proposed method, and another for prison visit management, using traditional Scrum. Both projects were carried out by the same team of engineers. The results showed that the proposed method increased agility by 40% and improved security by 71% compared with the traditional methodology. These results highlight the method's ability to optimize both agility and security in the development of biometric systems, emphasizing its relevance in contexts where data protection and efficiency are essential.