A governance requirements extraction model for legal compliance validation

2009 2nd International Workshop on Requirements Engineering and Law, RELAW 2009

Volumn , Issue , 2009, Pages 7-12

  Hassan, Waël ^a   Logrippo, Luigi ^b  

^a UNIVERSITY OF OTTAWA   (Canada)

^b UNIVERSITÉ DU QUÉBEC EN OUTAOUAIS   (Canada)

Author keywords

Compliance; GAM; Governance; PIPEDA; Requirement extraction; SOX

Indexed keywords

BUSINESS PROCESS; COMPLIANCE; CONTROL REQUIREMENTS; ENTERPRISE REQUIREMENTS; EXTRACTION MODEL; EXTRACTION PROCESS; FORMAL SPECIFICATION; LEGAL COMPLIANCE; LOGIC ANALYZER; LOGIC MODELS; MODEL BASED APPROACH; PRIVACY LAW;

ACCESS CONTROL; REQUIREMENTS ENGINEERING;

LAWS AND LEGISLATION;

EID: 77952967487     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/RELAW.2009.4     Document Type: Conference Paper

References (29)

1. Ashley , P. A privacy logging and reporting framework. APITSC. Queensland U. 2004.
2. Balust, J. M. And Franch, X. 2001. Building Expressive and Flexible Process Models Using a UML-Based Approach. LNCS, vol. 2077. Springer-Verlag, London, 152-172 (Pubitemid 33298850)
3. Bourcier, D. Legal Knowledge and Information Systems: JURIX 2003. IOS Press, 2004.
4. Breaux , T. And Antón, A. 2008. Analyzing Regulatory Rules for Privacy and Security Requirements. IEEE Trans. Software Eng. 34, 1 (Jan. 2008), 5-20.
5. Brodie, C. A., Karat, C., and Karat, J. : An empirical study of natural language parsing of privacy policy rules using the SPARCLE policy workbench. SOUPS '06, ACM. Proc. Series Vol. 149, 8-19.
6. Fischer-Hubner, S. And Otto, A. From a Formal Privacy Model to its Implementation. 21st NISSC. Arlington, VA, 5-8 October 5-8, 1998.
7. Ghanavati S., D. Amyot, and L. Peyton. Towards a framework for tracking legal compliance in healthcare. CaiSE'07. volume , pages 218-232. Springer, 2007.
8. Giblin, A. Y. Liu, S. Müller, B. Pfitzmann, and X. Zhou. Regulations Expressed as Logical Models (REALM). 18th JURIX 2005.Brussels. 2005. pp. 37-48.
9. Graham N., Statutory Interpretation: Theory and Practice. Emond Montgomery Publication, 2001.
10. Hassan, W., Logrippo, L. Requirements and compliance in legal systems: a logic approach. Requirements Engineering and Law, 2008. RELAW '08. , vol., no., pp.40-44, 9-9 Sept. 2008.
11. Hassan, W. Validating Legal Compliance, Governance analysis method. Doctoral Thesis. University of Ottawa. 2009.
12. Hassan, W., Logrippo, L. Validating legal compliance, Information systems Journal. 2009.
13. Multilateral Instrument 52-111- Reporting on internal control over financial reporting. (2005)28OSCB 1317.
14. ITU-T: User Requirements Notation (URN) - Language Requirements and Framework. ITU-T Recommendation Z.150. Geneva, Switzerland, February 2003.
15. Jackson, P., Al-Kofahi, K., Tyrrell, A., and Vachher, A. 2003. Information extraction from case law and retrieval of prior cases. Artif. Intell. 150, 1-2 (Nov. 2003), 239-290.
16. Jackson D. Software Abstractions: Logic, Language, and Analysis. MIT Press. Cambridge, MA. March 2006. ISBN 0-262-10114-9.
17. Jarke, M. & Kurki-Suonio, R. (1998). Guest Editorial. Special issue on Scenario Management. 1EEE Transactions on Software Engineering, 24(12).
18. Kerrigan, S. And Law, K. H. 2003. Logic-based regulation compliance-assistance. ICAIL '03. ACM, New York, NY, 126-135.
19. Kiyavitskaya, N., Zeni, N., Breaux, T. D., Antón, A. I., Cordy, J. R., Mich, L., and Mylopoulos, J. 2007. Extracting rights and obligations from regulations: toward a tool support tool supported Process. ASE '07. ACM, NY, 429-432.
20. Lee, S. W. and Gandhi, R. A. 2005. Ontology-based Active Requirements Engineering Framework. APSEC. IEEE Computer Society, Washington, DC, 481-490. 2005.
21. Li, N., Yu, T., and Antón, A.I. A semantics-based approach to privacy languages. CERIAS Technical Report TR 2003-28. Purdue University, Nov. 2003.
22. Logrippo, L. Normative Systems: the Meeting Point between Jurisprudence and Information Technology? In: H. Fujita, D. Pisanelli (Eds.): New Trends in Software Methodologies, Tools and Techniques - Proc. of the 6th SoMeT-07. IOS Press, 2007, 343-354.
23. Mitra, P., Pan, C., Liu, P., and Atluri, V. 2006. Privacy-preserving semantic interoperation and access control of heterogeneous databases. ASIACCS '06. ACM Press, New York, NY, 66-77.
24. Onabajo A. Analysis of Multilateral Software Confidentiality Requirements. PhD Thesis. 2009.
25. Personal Information Protection and Electronic Documents Act (PIPEDA). Second Session. Thirty-sixth Parliament. 48-49 Elizabeth II. 1999-2000.
26. Roessler T, Wenning R. Challenges for Privacy Policy Languages. W3C Workshop on Languages for Privacy Policy Negotiation and Semantics-Driven Enforcement. 2007.
27. Sarbanes-Oxley Act of 2002. Second session. One hundred seventh congress of the United States of America. 23 January 2002.
28. Wintgens L. Legislation in Context: Essays in Legisprudence. Ashgate Pub. 2007.
29. Yao-Hua Tan, Leendert W. N. van der Torre: Why Defeasible Deontic Logic needs a Multi Preference Semantics. ECSQARU 1995: 412-419.