A semantic framework for compliance management in business process management

Lecture Notes in Informatics (LNI), Proceedings - Series of the Gesellschaft fur Informatik (GI)

Volumn , Issue , 2009, Pages 60-80

  El Kharbili, Marwane ^a   Pulvermüller, Elke ^b  

^a IDS SCHEER AG   (Germany)

^b UNIVERSITY OF OSNABRÜCK   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

BUSINESS PROCESS COMPLIANCES; BUSINESS PROCESS MANAGEMENT; COMPLIANCE MANAGEMENT; ITS ARCHITECTURE; LEGAL REGULATION; POLICY-BASED FRAMEWORK; SEMANTIC CONSISTENCY; SEMANTIC FRAMEWORK;

ENTERPRISE RESOURCE MANAGEMENT; INDUSTRY; LAWS AND LEGISLATION; SEMANTICS;

MANAGEMENT SCIENCE;

EID: 80855149354     PISSN: 16175468     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (45)

1. Scheer, A.W. ARIS - Business Process Frameworks. Third edition, Springer, Berlin. 2000.
2. El Kharbili, M.; Stein, S.; Markovic, I. & Pulvermüller, E. Sadiq, S.; Indulska, M. & zur Muehlen, M. (ed.) Towards a Framework for Semantic Business Process Compliance Management. Proceedings of the workshop on Governance, Risk and Compliance for Information Systems (GRCIS 2008), CEUR Workshop Proceedings, Montepellier, France, June 2008, 339, pp. 1-15.
3. Congress of the United States. Public Company Accounting Reform and Investor Protection Act (Sarbanes-Oxley Act). Pub. L. No. 107-204, 116 Stat. 745.2002.
4. Hartman, T.E. The Cost of Being Public in the Era of Sarbanes-Oxley. 2007.
5. Committee of Sponsoring Organizations of the Treadway Commission (COSO) framework. Retrieved on 01.11.2008 at: http://www.coso.org/default.htm.
6. Control Objectives for Information and Related Technologies. Retrieved on 01.11.2008 from: http://www.isaca.org/Template.cfm?Section=COBIT6&Template= /TaggedPage/TaggedPageDisplay.cfm&TPLID=55&ContentID=31519.
7. IT Infrastructure Library. Retrievd on 01.11.2008 from: http://www.ogc.gov.uk/guidance-itil.asp.
8. TOGAF Framework. Retrieved on 01.11.2008 from: http://www.togaf.org/, http://www-128.ibm.com/developerworks/ibm/library/ar-togaf1/.
9. M. S. Fox. The TOVE Project Towards a Common-Sense Model of the Enterprise. In IEA/AIE '92: Proceedings of the 5th international conference on Industrial and engineering applications of artificial intelligence and expert systems, pages 25-34, London, UK, 1992. Springer-Verlag.
10. Uschold, M., King, M., Moralee, S., Zorgios, Y. (1998). The Enterprise Ontology. The Knowledge Engineering Review, 13(1):31-89, 1998. Retrieved August 1, 2008, from: http://www.aiai.ed.ac.uk/project/enterprise/enterprise/ontology. html.
11. Jan Dietz. Enterprise Ontology - Theory and Methodology. Springer-Verlag Berlin Heidelberg. 2006.
12. Zachman, J. A. (1992). Extending and Formalizing the Framework for Information Systems Architecture. IBM Systems Journal (Volume 31, No. 3).
13. Hepp, Martin et al.: Semantic Business Process Management: A Vision Towards Using Semantic Web Services for Business Process Management. IEEE International Conference on e-Business Engineering (ICEBE 2005). Beijing, China, October 18-20, 2005, pp. 535-540.
14. Martin Hepp, Dumitru Roman: An Ontology Framework for Semantic Business Process Management, Proceedings of Wirtschaftsinformatik 2007, February 28-March 2, 2007, Karlsruhe.
15. Pedrinaci, C., Brelage, C. van Lessen, T., Domingue, J., Karastoyanova, D. and Leymann, F. 2008. Semantic Business Process Management: Scaling up the Management of Business Processes. In 2nd IEEE International Conference on Semantic Computing (ICSC), IEEE Computer Society.
16. SBVR, Object Management Group (OMG) 2008. Semantics of Business Vocabulary and Rules (SBVR), formal specification V1.0. Retrieved August 1, 2008, from: http://www.omg.org/spec/SBVR/1.0/.
17. ISO 639 Standard series. Retrieved on 01.11.2008 from: http://www.iso.org/iso/iso-catalogue/catalogue-tc/catalogue-detail.htm?csnumber= 39534.
18. Kim, H.M., Fox, M.S., and Gruninger, M. An ontology for quality management-enabling quality problem identification and tracing. BT Technology Journal (Vol. 17, No. 4, pp. 131-140). 1999.
19. Norbert E. Fuchs, Kaarel Kaljurand, Gerold Schneider (2005). Verbalising Formal Languages in Attempto Controlled English I. In deliverable I2-D5 of the REWERSE research project. Retrieved August 15, 2008, from: http://rewerse.net/ deliverables/m18/i2-d5.pdf.
20. El Kharbili, M.; Stein, S. Pulvermueller, E. Policy-Based Semantic Compliance Checking for Business Process Management. In Proceedings of MOBIS Workshops - MOBIS Conference, Saarbrücken, November 2008.
21. Nitzsche, J., Wutke, D. and van Lessen, T. An Ontology for Executable Business Processes. In Hepp, M., Hinkelmann, K., Karagiannis, D., Klein, R. and Stojanovic, N. (eds.): Semantic Business Process and Product Lifecycle Management, Proceedings of the Workshop SBPM 2007. Innsbruck, April 7, 2007, CEUR Workshop Proceedings, ISSN 1613-0073, online CEUR-S.org/Vol-251/.
22. Nitzsche, J., van Lessen, T., Karastoyanova, D., and Leymann, F. BPEL for Semantic Web Services (BPEL4SWS). On the Move to Meaningful Internet Systems 2007: OTM 2007 Workshops (179-188). Springer. 2007.
23. OASIS Web Services Business Process Execution Language (WSBPEL) TC. Web services business process execution language version 2.0 committee specification. http://docs.oasis-open.org/wsbpel/2.0/CS01/wsbpelv2.0-CS01.pdf, January 2007.
24. B. van Dongen, A. K. Alves de Medeiros, H. Verbeek, A. Weijters, and W. van der Aalst. The ProM Framework: A New Era in Process Mining Tool Support. In Applications and Theory of Petri Nets 2005. 26th International Conference, ICATPN 2005, pages 444-454, Miami, USA, June 2005. Springer-Verlag.
25. Bonatti, P. A., Shahmehri, N., Duma, C., Olmedilla, D., Nejdl, W., Baldoni, M., Baroglio, C., Martelli, A., Patti, V., Coraggio, P., Antoniou, G., Peer, J., Fuchs, N. E (2004). Rule-based Policy Specification: State of the Art and Future Work. In deliverable I2-D1 of the REWERSE research project. Retrieved August 15, 2008, from: http://rewerse.net/deliverables/i2-d1.pdf.
26. Karagiannis D., Nemetz, M., Schwab M. (2006). Dashboards for Monitoring Compliance to Regulations - A SOX-based Scenario. Proceedings of IGO'06-International Conference on Integrating Global Organizations, Siena.
27. Wetzstein, B., Ma, Z., Filipowska, A. Kaczmarek, M., Bhiri, S., Losada, S., Lopez-Cob, J.-M., Cicurel, L. 2007. Semantic Business Process Management: A Lifecycle Based Requirements Analysis. In Proceedings of the Workshop on Semantic Business Process and Product Lifecycle Management (SBPM-2007). Vol-251, CEUR-WS, ISSN 1613-0073.
28. Filipowska, A., Kaczmarek, M., Stein, S. Semantically Annotated EPC within Semantic Business Process Management. Workshop on Advances in Semantics for Web Services (semantic4ws). Milan, Italy. 2008.
29. Belecheanu, R. et al. Cabral, L., Domingue, J., Gaaloul, W., Hepp, M., Filipowska, A., Kaczmarek, M., Kaczmarek. T., Nitzsche, J., Norton, B., Pedrinaci, C., Roman, D., Stollberg, M., Stein, S. Business Process Ontology Framework. SUPER research project deliverable D1.1. 2007. Retrieved August 1, 2008 from: http://www.ip-super.org/res/Deliverables/M12/D1.1.pdf.
30. Pedrinaci, C., Domingue, J., De Medeiros, A. A Core Ontology for Business Process Analysis. In Proceedings of the 5th European Semantic Web Conference 2008, Tenerife. 2008.
31. Liu, A. Y., Müller, S., Xu, K. A Static Compliance-Checking Framework for Business Process Models. IBM Systems Journal (46(2), pp. 335-361). 2007.
32. Rossak, W., Foetsch, D., Pulvermueller, E. Modeling and Verifying Workflow-based Regulations. In Proceedings of the international workshop on regulations modeling and their validation and verification - REMO2V06 (pp. 825-830). CEUR-WS.org/vol-241, Luxemburg. 2006.
33. Kagal, L. (2004). A Policy-Based Approach to Governing Autonomous Behavior in Distributed Environments. PhD Thesis, Faculty of the Graduate School of the University of Maryland. 2004.
34. Namiri, K., Stojanovic., N. (2007). A Formal Approach for Internal Controls Compliance in Business Processes. 8th Workshop on Business Process Modeling, Development, and Support (BPMDS07). Trondheim, Norway.
35. Sadiq S., Governatori G., Namiri K. (2007). Modeling Control Objectives for Business Process Compliance. Proceedings of the 5th International Conference, BPM 2007 (pp.149-164). Brisbane, Springer.
36. Karagiannis, D. (2008). A Business process Based Modelling Extension for Regulatory Compliance. Proceedings of the Multikonferenz Wirtschaftsinformatik 2008, Munich.
37. Karagiannis D., Mylopoulos J., Schwab M. (2007). Business Process-Based Regulation Compliance: The Case of the Sarbanes-Oxley Act. Proceedings of 15th IEEE International Requirements Engineering Conference, New Delhi.
38. Goedertier, S., Vanthienen, J. (2006). Designing Compliant Business Processes from Obligations and Permissions, 2nd Workshop on Business Processes Design (BPD'06).
39. Governatori, G., Milosevic, Z., Sadiq, S. (2006). Compliance checking between business processes and business contracts. 10th International Enterprise Distributed Object Computing Conference (EDOC 2006) (pp. 221-232). IEEE Press.
40. Sadiq, S., Milosevic, Z., Fiadeiro, J., Orlowska, M. 2006. Towards a methodology for deriving contract-compliant business processes. In Proceedings of the 4th International Conference on Business Process Management (BPM06), Vienna, Austria.
41. Schmidt, R., Bartsch, C., Oberhauser, R. (2007). Ontology-based representation of compliance requirements for service processes. Proceedings of the Workshop on Semantic Business Process and Product Lifecycle Management (SBPM 2007).
42. Ghose, A.K. and Koliadis, G. 2007. Auditing business process compliance. In Proceedings of the International Conference on Service-Oriented Computing (ICSOC-2007) (vol. 4749 of Lecture Notes in Computing Sicence, pp. 169-180).
43. Parameswaran, N., Ray, P., Yip, F.2007. Rules and Ontology in Compliance Management. In Proceedings of the 11th IEEE International Enterprise Distributed Object Computing Conference (page 435).
44. Milosevic, Z. 2005. Towards Integrating Business Policies with Business Processes. In W.M.P. van der Aalst, B. Benatallah, F. Casati, and F. Curbera (Eds.), Business Process Management (volume 3649, pp. 404-409).
45. Ly, L. T.; Göser, K.; Rinderle-Ma, S. & Dadam, P. Sadiq, S.; Indulska, M. & zur Muehlen, M. (ed.). Compliance of Semantic Constraints - A Requirements Analysis for Process Management Systems. Proceedings of the workshop on Governance, Risk and Compliance for Information Systems (GRCIS 2008), CEUR Workshop Proceedings, Montepellier, France, June 2008, 339, 31-45.