Modeling Concepts for Internal Controls in Business Processes – An Empirically Grounded Extension of BPMN

Abstract

Abstract.With the increasing number and complexity of legal obligations, ensuring business process compliance presents a major challenge for today's organizations. In this regard, implementing a set of control means and regularly auditing their effectiveness are suitable measures to ensure a compliant design and enactment of a business process. However, common business process modeling languages (PML) do not provide appropriate concepts to comprehensively model such control means. Not surprisingly, common PMLs are not widely used in the audit domain. To address this gap, this paper presents an extension of a PML with modeling concepts for process-integrated control means. As it is based on previous empirical research with auditors, the extension especially considers their requirements. The results of a laboratory experiment with 78 participants demonstrate that the extension supports auditors to gain a more comprehensive understanding of internal controls in a process model compared to current audit practice.

An experimental investigation of BPMN-based corporate communications modeling

“…In order to provide answers to the RQ, an experimental investigation was performed. We chose an experimental approach since we were able to compare the diagrams modeled with CCML against the standardized BPMN conversation diagrams, an approach that was applied in similar studies (Radloff et al, 2015;Schultz and Radloff, 2014). The following subsections describe the research model, followed by a description of the experimental design.…”