Making business processes compliant to standards & regulations

Proceedings - IEEE International Enterprise Distributed Object Computing Workshop, EDOC

Volumn , Issue , 2011, Pages 3-13

  Papazoglou, Michael P ^a  

^a TILBURG UNIVERSITY   (Netherlands)

Author keywords

Compliance constraint detection and prevention; Compliance patterns; Compliance request language; Regulatory compliance; Root cause analysis

Indexed keywords

AUTOMATED TOOLS; BUSINESS PROCESS; COMPLIANCE ANALYSIS; COMPLIANCE CONSTRAINT DETECTION AND PREVENTION; COMPLIANCE PATTERNS; COMPLIANCE REGULATIONS; COMPLIANCE REQUEST LANGUAGE; NUMBER OF METHODS; ROOT CAUSE ANALYSIS;

REGULATORY COMPLIANCE;

EID: 80054914062     PISSN: 15417719     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/EDOC.2011.37     Document Type: Conference Paper

References (24)

1. S. Sadiq, G. Governatori, and K. Naimiri, "Modeling control objectives for business process compliance.", Proceedings of the 5th International Conference on Business Process Management, LNCS vol. 4714, Springer-Verlag, Brisbane, Australia, September 2007.
2. Z. Rezaee, "Corporate Governance Post-Sarbanes-Oxley: Regulations, Requirements and Integrated Processes", John Wiley & Sons, New Jersey, 2007.
3. U.S. Murthy and S.M. Groomer, "A continuous auditing web services model for XML-based accounting systems", Accounting Information Systems, Elsevier, vol. 5, no. 2, July 2004, pp. 139- 163.
4. W.R. Knechel et al., Auditing: Risk & Assurance, Thomson, South-Western, 2007.
5. R.E. Cascarino, Auditor's Guide to Information Systems Auditing, John Wiley & Sons, New Jersey, 2007.
6. K. Namiri, and N. Stojanovic, "Pattern-based design and validation of business process compliance", Proceedings of the International Conference on Cooperative Information Systems 2007, LNCS vol. 4803 Springer-Verlag, Portugal, November 2007.
7. IT Governance Institute (ITGI), COBIT 4.1, 2007, www.itgi.org.
8. Committee of Sponsoring Organizations of the Treadway Commission (COSO), Internal Control-Integrated Framework, June 2008, www.coso.org/documents/ VolumeII-Guidance.pdf.
9. Institute of Management Accountants, "Enterprise Risk Management: Frameworks, Elements, and Integration", February 2011, available fromwww.imanet.org.
10. O. Turetken, A. Elgammal, W.J. van den Heuvel, and M. P.Papazoglou, "Enforcing Compliance on Business Processes through the use of Patterns", 19th European Conference on Information Systems, Finland, June 2011.
11. M. P. Papazoglou, and W.-J. van den Heuvel, "Business process development life cycle methodology", Communications of ACM, vol. 50, no. 10, Oct. 2007, pp. 79-85.
12. L. Ly, S. Rinderle-Ma, K. Göser, P. Dadam, "On enabling integrated process compliance with semantic constraints in process management systems", Information Systems Frontiers, vol. 9, no.5, pp. 1-25.
13. G. Koliadis, A. K.Ghose, "Service Compliance: towards electronic compliance programs", Tech. Rep. TR2008-01, Decision Systems Lab, University of Wollongong, 2008.
14. S. Strecker, D. Heise, U. Frank, "RiskM: A multi-perspective modeling method for IT risk assessment", Information Systems Frontiers, May 2010, DOI: 10.1007/s10796-010-9235-3, pp. 1-17.
15. A.K. Ghose, G. Koliadis, "Auditing business process compliance", Proceedings of the International Conference on Service-Oriented Computing 2007, LNCS vol. 4749, Springer-Verlag, pp. 169-180.
16. G. Governatori, Z. Milosevic, S. Sadiq, "Compliance checking between business processes and business contracts", 10th International Enterprise Distributed Object Computing Conference (EDOC 2006), IEEE Computing Society 2006, pp. 221-232.
17. K. Namiri, N. Stojanovic, "Towards a formal framework for business process compliance", Multikonferenz Wirtschaftsinformatik, GITOVerlag, Berlin, 2008.
18. A. Elgammal, O. Turetken, W.J. van den Heuvel, M.P. Papazoglou, "Root-cause analysis of design-time compliance violations on the basis of Property Patterns", 8th International Conference on Service-Oriented Computing (ICSOC10), LNCS vol. 6470, Springer-Verlag, San Francisco, Dec. 2010, pp. 17-31.
19. M. Dwyer, G. Avrunin, J. Corbett, "Property specification patterns for finite-state verification", Workshop on Formal Methods on Software Practice, March 1998, Clearwater Beach, pp. 7-15.
20. H. Dettmer, "Goldratt's theory of constraints: a systems approach to continuous improvement", ASQC Quality Press 1997, pp. 62- 119.
21. A. Elgammal, O. Turetken, W. van den Heuvel, M. Papazoglou, "On the formal specification of business contracts and regulatory compliance", 4th Workshop on Formal Languages and Analysis of Contract-Oriented Software, EPTCS, Pisa, Italy, 2010, pp. 33-36.
22. Basel II, International Convergence of Capital Measurement and Capital Standards: A Revised Framework. Bank for International Settlements (2004).
23. SOX, Sarbanes-Oxley Act. USA Congress (2002).
24. IFRS, International Financial Reporting Standards. International Accounting Standards Board. (2001).