Managing standards compliance

Abstract

Abstract-Software engineering standards determine practices that "compliant" software processes shall follow. Standards generally define practices in terms of constraints that must hold for documents. The document types identified by standards include typical development products, such as user requirements, and also process-oriented documents, such as progress reviews and management reports. The degree of standards compliance can be established by checking these documents against the constraints, It is neither practical nor desirable to enforce compliance at all points in the development process. Thus, compliance must be managed rather than imposed. We outline a model of standards and compliance and illustrate it with some examples. We give a brief account of the notations and method we have developed to support the use of the model and describe a support environment we have constructed. The principal contributions of our work are: the identification of the issue of standards compliance; the development of a model of standards and support for compliance management; the development of a formal model of product state with associated notation: a powerful policy scheme that triggers checks; a flexible and scalable compliance management view Index Terms-Software processes, software engineering standards, software development environments, compliance, consistency management.

Reconciliation of Object Interaction Models

“…This work has generated techniques for detecting inconsistencies in structured and textbased [1,3,4,12], object-oriented [2,6,18], statebased [7,8], and formal software models [5,17].…”

A Foolish Consistency: Technical Challenges in Consistency Management

“…The Proceedings of the Viewpoints '96 Workshop [5] and the Multi-dimensional Separation of Concerns Workshop '00 [6] reflect the growing interest among software engineers in this issue. The author has a long sequence of work addressing consistency management that includes [1], [2], [3]. Each of these papers contains a discussion of relevant contributions, these include work in AI, CSCW and distributed heterogeneous databases.…”

A Framework for Organizational Compliance Management Tactics

“…With the advent of stricter legal demands, industrial best practices and prescriptive enterprise architectures, the topic of organizational compliance has become highly relevant for both practitioners and academics [1,2,3,4]. Organizational compliance can relate to various types and levels of prescriptive systems.…”

“…This is not merely a philosophical stance, as several studies demonstrate that non-compliance in organizations is widespread [3,8,9]. This makes compliance a strategic issue in the current era, especially considering the high costs organizations have to pay for their Ralph Foorthuis 1 and Rik Bos 2 Accepted for presentation at GRCIS 2011, CAiSE Workshop on Governance, Risk and Compliance, London, United Kingdom.…”

“…In addition, scandals and unethical firm behavior can severely damage an organization due to unsatisfied customers, shareholders, employees and other stakeholders [1,12]. On the other hand, demonstrating compliance with regulations, industrial best practices and ethical norms can yield a good reputation and the benefits that come with it, such as attracting large institutional investors and customers [2,9,12]. However, organizations have difficulties implementing their compliance management approaches [13,14].…”