Maintaining Compliance in Customizable Process Models

Schleicher, Daniel; Anstett, Tobias; Leymann, Frank; Mietzner, Ralph

doi:10.1007/978-3-642-05148-7_7

Cited by 13 publications

(7 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…These are attached to an abstract business process. By a successive refinement of both the business process model and the compliance requirements and under consideration of 'modeling constraints' a comprehensive compliant business process model is designed [21,22]. A quantitative measure is suggested by Lu et al with their compliance distance [23].…”

Section: Related Workmentioning

confidence: 99%

Process-based compliance: Probabilities

Schwab

2012

2012 Sixth International Conference on Research Challenges in Information Science (RCIS)

View full text Add to dashboard Cite

In the paper at hand compliance in the context of business process modeling is discussed. The approach suggested is a contribution to the topic 'compliance by design'. The focus of this compliance approach is on the development of quantitative compliance indicators in order to evaluate the fit of the business process model to compliance parameters. The calculation of these indicators contributes to optimize business process models regarding their compliance design. The calculation algorithm of the compliance indicators reverts to existing simulation algorithms. Finally, first steps towards the development of such compliance indicators are presented in the later part of the paper.

show abstract

Section: Related Workmentioning

confidence: 99%

Process-based compliance: Probabilities

Schwab

2012

2012 Sixth International Conference on Research Challenges in Information Science (RCIS)

View full text Add to dashboard Cite

show abstract

“…Compliance implementation has received attention and partial automated support, in particular from the BPM community. Several works have considered configurable compliance controls for business processes, in the form of compliance descriptors [17], business process templates [28] and configurable compliance rules [27]. Implementation automa- Assurances N/A [3,4,9,31,36] [ 25,35] N/A [12,23,26] Performance N/A N/A N/A [33] tion has been addressed from different perspectives.…”

Section: Implementmentioning

confidence: 99%

Towards adaptive compliance

García-Galán

Pasquale

Grispos

et al. 2016

Proceedings of the 11th International Symposium on Software Engineering for Adaptive and Self-Managing Systems

View full text Add to dashboard Cite

Mission critical software is often required to comply with multiple regulations, standards or policies. Recent paradigms, such as cloud computing, also require software to operate in heterogeneous, highly distributed, and changing environments. In these environments, compliance requirements can vary at runtime and traditional compliance management techniques, which are normally applied at design time, may no longer be sufficient. In this paper, we motivate the need for adaptive compliance by illustrating possible compliance concerns determined by runtime variability. We further motivate our work by means of a cloud computing scenario, and present two main contributions. First, we propose and justify a process to support adaptive compliance that extends the traditional compliance management lifecycle with the activities of the Monitor-Analyse-Plan-Execute (MAPE) loop, and enacts adaptation through re-configuration. Second, we explore the literature on software compliance and classify existing work in terms of the activities and concerns of adaptive compliance. In this way, we determine how the literature can support our proposal and what are the open research challenges that need to be addressed in order to fully support adaptive compliance.

show abstract

“…By using compliance templates, we can, for example, define the acceptable order in which activities should be performed, which activities are allowed, and which constraints exist among them [30]. This approach has multiple benefits.…”

Section: Specifying Compliant Behaviorsmentioning

confidence: 99%

SOA-enabled compliance management: instrumenting, assessing, and analyzing service-based business processes

Rodríguez

Schleicher

Daniel

et al. 2013

SOCA

Self Cite

View full text Add to dashboard Cite

Facilitating compliance management, that is, assisting a company's management in conforming to laws, regulations, standards, contracts, and policies, is a hot but non-trivial task. The service-oriented architecture (SOA) has evolved traditional, manual business practices into modern, service-based IT practices that ease part of the problem: the systematic definition and execution of business processes. This, in turn, facilitates the online monitoring of system behaviors and the enforcement of allowed behaviors-all ingredients that can be used to assist compliance management on the fly during process execution. In this paper, instead of focusing on monitoring and runtime enforcement of rules or constraints, we strive for an alternative approach to compliance management in SOAs that aims at assessing and improving compliance. We propose two ingredients: (i) a model and tool to design compliant service-based processes and to instrument them in order to generate evidence of how they are executed and (ii) a reporting and analysis suite to create awareness of a company's compliance state and to enable understanding why and where compliance violations have occurred. Together, these ingredients result in an approach that is close to how the real stakeholderscompliance experts and auditors-actually assess the state of compliance in practice and that is less intrusive than enforcing compliance.

show abstract

Maintaining Compliance in Customizable Process Models

Cited by 13 publications

References 10 publications

Process-based compliance: Probabilities

Process-based compliance: Probabilities

Towards adaptive compliance

SOA-enabled compliance management: instrumenting, assessing, and analyzing service-based business processes

Contact Info

Product

Resources

About