An Integrated Solution for Runtime Compliance Governance in SOA

Birukou, Aliaksandr; D’Andrea, Vincenzo; Leymann, Frank; Serafinski, Jacek; Silveira, Patrícia Souza da; Strauch, Steve; Tluczek, Marek

doi:10.1007/978-3-642-17358-5_9

Cited by 23 publications

(19 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…We rely on the descriptions provided by Weske to briefly define each phase of the business process lifecyle and foresee the aspects it would require to be compliance-aware. There are so-called compliance lifecycles in literature, such as the one in [3,7]. This lifecycle differs from our proposal in that it is directly focused on compliance, while we focus on business process management.…”

Section: Compliance-aware Business Process Lifecyclementioning

confidence: 98%

“…The work in [3] and [18] are two of the few approaches we have found regarding compliance checking at run time. However, no mention to the features desired for this phase of business process lifecycle is included in them.…”

Section: Enactmentmentioning

confidence: 99%

“…Many organizations are concerned with ensuring compliance between business processes and regulations, and this has awoken the interest of many researchers. There are some well-defined and automatically supported approaches for PostDesign Time Compliance Checking (PDTCC) [1,2], for Run-Time Compliance Checking (RTCC) [3], and for Backward Compliance Checking (BCC) [4,5]. However, most of these approaches focus both on a specific kind of compliance rules (e.g.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Exploring Features of a Full-Coverage Integrated Solution for Business Process Compliance

Cabanillas

Resinas

Ruiz–Cortés

2011

Progress in Pattern Recognition, Image Analysis, Computer Vision, and Applications

View full text Add to dashboard Cite

Abstract. The last few years have seen the introduction of several techniques for automatically tackling some aspects of compliance checking between business processes and business rules. Some of them are quite robust and mature and are provided with software support that partially or fully implement them. However, as far as we know there is not yet a tool that provides for the complete management of business process compliance in the whole lifecycle of business processes. The goal of this paper is to move towards an integrated business process compliance management system (BPCMS) on the basis of current literature and existing support. For this purpose, we present a description of some compliance-related features such a system should have in order to provide full coverage of the business process lifecycle, from compliance aware business process design to the audit process. Hints about what existing approaches can fit in each feature and challenges for future work are also provided.

show abstract

Section: Compliance-aware Business Process Lifecyclementioning

confidence: 98%

Section: Enactmentmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Exploring Features of a Full-Coverage Integrated Solution for Business Process Compliance

Cabanillas

Resinas

Ruiz–Cortés

2011

Progress in Pattern Recognition, Image Analysis, Computer Vision, and Applications

View full text Add to dashboard Cite

show abstract

“…In the subsequent sections, we describe the major components of the runtime compliance governance framework including the Rule-based, Event-driven Compliance Monitoring component and the Compliance Governance Dashboard. For further details of the rest of the runtime compliance governance framework, please consult our previous work in [5].…”

Section: Complex Eventmentioning

confidence: 99%

“…The IT experts will refine these concepts in the low-level views that are specific to the BPEL and Web services technology. The process implementation in form of Business Process Execution Language (BPEL) 5 and Web Services Description Language (WSDL) 6 code can be quickly generated out of the aforementioned views for deploying and testing.…”

Section: A View-based Modeling Frameworkmentioning

confidence: 99%

An End-to-End Framework for Business Compliance in Process-Driven SOAs

Tran

Holmes

Oberortner

et al. 2010

2010 12th International Symposium on Symbolic and Numeric Algorithms for Scientific Computing

View full text Add to dashboard Cite

It is significant for companies to ensure their businesses conforming to relevant policies, laws, and regulations as the consequences of infringement can be serious. Unfortunately, the divergence and frequent changes of different compliance sources make it hard to systematically and quickly accommodate new compliance requirements due to the lack of an adequate methodology for system and compliance engineering. In addition, the difference of perception and expertise of multiple stakeholders involving in system and compliance engineering further complicates the analyzing, implementing, and assessing of compliance. For these reasons, in many cases, business compliance today is reached on a per-case basis by using ad hoc, hand-crafted solutions for specific rules to which they must comply. This leads in the long run to problems regarding complexity, understandability, and maintainability of compliance concerns in a SOA. To address the aforementioned challenges, we present in this invited paper a comprehensive SOA business compliance software framework that enables a business to express, implement, monitor, and govern compliance concerns.

show abstract