Business process regulatory compliance management solution frameworks: A comparative evaluation

Conferences in Research and Practice in Information Technology Series

Volumn 130, Issue , 2012, Pages 23-32

  Kharbili, Marwane El ^a  

^a UNIVERSITY OF LUXEMBOURG   (Luxembourg)

Author keywords

Business process management; Regulatory compliance

Indexed keywords

BUSINESS PROCESS; BUSINESS PROCESS MANAGEMENT; COMPARATIVE ANALYSIS; COMPARATIVE EVALUATIONS; CURRENT STRENGTH; EVALUATION CRITERIA;

ENTERPRISE RESOURCE MANAGEMENT; REGULATORY COMPLIANCE; RESEARCH; SURVEYS;

CLIMATE MODELS;

EID: 84863575196     PISSN: 14451336     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (67)

1. N. S. Abdullah, Information systems research: Aligning to industry challenges in management of regulatory compliance," in PACIS 2010 Pro-ceedings, Paper 36, 2010.
2. J. Anon, F. H., and J. Kovatch, Integrating sarbanes-oxley controls into an investment rm governance framework," The Journal of Invest-ment Compliance, vol. 8, no. 1, pp. 40{43, 2007.
3. T. Butler and D. Mc Govern, Adopting it to manage compliance and risks: An institutional perspective." in Proceedings of the 16th Euro-pean Conference on Information Systems, 2008, p. 1043.
4. C. R. John Bace, Understanding the components of compliance," Gartner Research - ID Number: G00137902, 7 July 2006.
5. Regulatory requirements analysis," Master Project - Deliverable D1.1.2, 2009-06-24.
6. Stakeholder requirements analysis," Master Project - Deliverable D1.1.2, 2009.
7. N. S. Abdullah, S. W. Sadiq, and M. Indulska, Emerging challenges in information systems research for regulatory compliance management," in CAiSE, 2010, pp. 251{265.
8. M. Abdullah, Norris Syed; Indulska and S. Shazia, A study of compliance management in information systems research," in ECIS 2009 Proceedings, Paper 5, 2009.
9. A. Cleven and R. Winter, Regulatory compliance in information systems research - literature analysis and research agenda," in BPMD-S/EMMSAD Proceedings, 2009, pp. 174{186.
10. L. T. Ly, K. Goeser, S. Rinderle-Ma, and P. Dadam, Compliance of semantic constraintsa requirements analysis for process management systems," in Proceedings of the workshop on Gov-ernance, Risk and Compliance for Information Systems, vol. 339, 2008, pp. 31{45.
11. L. Ly, S. Rinderle-Ma, K. Göser, and P. Dadam, On enabling integrated process compliance with semantic constraints in process management systems," Information Systems Frontiers, pp. 1{25, 2009.
12. M. El Kharbili, A. K. Alves de Medeiros, S. Stein, and W. M. P. van der Aalst, Business process compliance checking: Current state and future challenges," in Proceedings of the Confer-ence on Business Information Systems (MobIS), ser. LNI, vol. 141, 2008, pp. 107{113.
13. S. Turki and M. Bjekovic-Obradovic, Compliance in e-government service engineering: State-of-the-art," in Exploring Services Science, vol. 53, 2010.
14. P. N. Otto and A. I. Antón, Addressing legal requirements in requirements engineering," in Pro-ceedings of the Requirements Engineering Con-ference, 2007, pp. 5{14.
15. M. El Kharbili, S. Stein, I. Markovic, and E. Pulvermueller, Towards a framework for semantic business process compliance management," in Proceedings of the GRCIS workshop, vol. 339,2008, pp. 1{15.
16. D2.1.state-of-the-art in theeld of compliance languages," COMPAS FP7 Project Consortium, 2008.
17. COMPAS, D2.2-initial specication of compliance language constructs and operators," COMPAS FP7 Project Consortium, 2009.
18. A. Elgammal, O. Turetken, W. van den Heuvel, and M. Papazoglou, On the formal specication of regulatory compliance: A comparative analysis." ICSOC10 Workshops, 2010.
19. B. Piero A., S. Nahid, and et al., Rule-based policy specication: State of the art and future work - rewerse i2-d1," 4 September 2004.
20. T. Breaux, M. Vail, and A. Anton, Towards regulatory compliance: Extracting rights and obligations to align requirements with regulations," in Proceedings of Requirements Engineer-ing, 14th IEEE International Conference, 2006, pp. 49 { 58.
21. A. Fuxman, J. Mylopoulos, M. Pistore, and P. Traverso, Model checking early requirements specications in tropos," 2001, 883635 174.
22. M. Weske, Business Process Management: Concepts, Languages, Architectures, 1st ed. Springer, Nov. 2007.
23. W. M. P. van der Aalst and K. M. van Hee, Workflow management: models, methods, and systems. MIT Press, 2002.
24. A.-W. Scheer, ARIS - Business Process Frame-works, 3rd ed. Berlin, Germany: Springer, 1999.
25. OMG, Business process modeling notation (bpmn) specication," February 2011, http://www.omg.org/spec/BPMN/2.0/PDF.
26. A. Rozinat and W. M. P. van der Aalst, Decision Mining in ProM, ser. LNCS, October, 2006 2006, pp. 420{425.
27. G. Governatori and A. Rotolo, A conceptually rich model of business process compliance," in Proceedings of the 7th Asia-Pacic Conference on Conceptual Modelling (APCCM 2010), Bris-bane, Australia, 2010.
28. B. Christel and J.-P. Katoen, Principles of Model Checking. MIT Press, Cambridge, 2008.
29. E. Bertino, L. Martino, F. Paci, and A. Squicciarini, Access control for business processes," in Security for Web Services and Service-Oriented Architectures, 2010, pp. 159{177.
30. C. Wolter and C. Meinel, An approach to capture authorisation requirements in business processes," Requir. Eng., vol. 15, no. 4, pp. 359{373, 2010.
31. Marwane El Kharbili, Enterprise extended event-driven process chains - a model-driven method for designing formal enterprise modeling languages," University of Luxembourg, http://marco.gforge.uni.lu/papers/TR-RCMSOTA. pdf, LASSY Technical Report TRLASSY-11-07, 2011.
32. M. E. Kharbili, Q. Ma, P. Kelsen, and E. Pulvermueller, Enterprise regulatory compliance modeling using corel: An illustrative example," in The 13th IEEE Conference on Commerce and Enterprise Computing (CEC), 2011, pp. 185{ 190.
33. B. Dwyer, Matthew, G. S. Avrunin, and J. C. Corbett, Property specication patterns for nite-state verication," in Proceedings of the 2nd Workshop on Formal Methods in Software Practice, 1998.
34. A. Awad, A compliance management framework for business process models," Ph.D. dissertation, Hasspo-Plattner Institute, 2010.
35. Y. Liu, S. Mueller, and K. Xu, A static compliance-checking framework for business process models," IBM Syst. J., vol. 46, no. 2, pp. 335{361, 2007.
36. G. Governatori and M. Z, Dealing with contract violations: formalism and domain specic language." in Proceedings of the Conference on En-terprise Computing EDOC 2005. IEEE Press., 2005, pp. 46{57.
37. M. El Kharbili and E. Pulvermueller, A Semantic Framework for Compliance Management in Business Process Management." in 2nd Interna-tional Conference on Business Process and Ser-vice Computing, ser. LNI, 2009, pp. 60{80.
38. I. Weber, Semantic methods for execution level business modeling," Ph.D. dissertation, Universitaet Karlsruhe (KIT), 2009.
39. K. Namiri, Model-driven management of internal controls for business process compliance," Ph.D. dissertation, University of Karlsruhe, 2008.
40. S. Rainer, B. Christian, and O. Roy, Ontologybased representation of compliance requirements for service processes," in Workshop on Semantic Business Process and Product Lifecycle Manage-ment, 2007, pp. 28{39.
41. A. Elgammal, O. Turetken, W. van den Heuvel, and M. Papazoglou, Root-cause analysis of design-time compliance violations on the basis of property patterns," in 8th International Confer-ence on Service-Oriented Computing (ICSOC), 2010, pp. 17{31.
42. N. Kokash and F. Arbab, Formal behavioral modeling and compliance analysis for serviceoriented systems," in Formal Methods for Com-ponents and Objects, ser. LNCS, 2009, vol. 5751, pp. 21{41.
43. S. Goedertier and J. Vanthienen, Designing Compliant Business Processes with Obligations and Permissions, ser. LNCS, 2006, vol. 4103, pp. 5{14.
44. A. Ghose and G. Koliadis, Auditing business process compliance." in Proceedings of the Inter-national Conference on Service-Oriented Com-puting (ICSOC-2007), ser. Lecture Notes in Computing Sicence, vol. 4749, 2007, pp. 169{180.
45. C. Giblin, A. Y. Liu, S. Müller, B. Ptzmann, X. Zhou, M.-f. Moens, and P. Spyns, Regulations expressed as logical models (realm)," IBM Research Zurich, Tech. Rep.
46. M. Pesic, Constraint-based workflow management systems: Shifting controls to users," Ph.D. dissertation, TU Eindhoven, 2008.
47. F. Yip, N. Parameswaran, and P. Ray, Rules and ontology in compliance management," in 11th IEEE International Enterprise Distributed Object Computing Conference (EDOC), no. 1541-7719, 2007, p. 435.
48. V. Padmanabhan, G. Governatori, S. Sadiq, R. M. Colomb, and A. Rotolo, Process modelling: The deontic way." in Asia Pacic Confer-ence on Conceptual Modelling (APCCM 2006), 2006.
49. A. Förster, G. Engels, T. Schattkowsky, and R. V. D. Straeten, Verication of business process quality constraints based on visual process patterns," in TASE, 2007, pp. 197{208.
50. A. Kumar and R. Liu, A rule-based framework using role patterns for business process compliance," in RuleML, 2008, pp. 58{72.
51. C. Wolter, A. Schaad, and C. Meinel, Taskbased entailment constraints for basic workflow patterns," in SACMAT, 2008, pp. 51{60.
52. R. Agrawal, C. Johnson, J. Kiernan, and F. Leymann, Taming compliance with sarbanes-oxley internal controls using database technology," in 22nd International Conference on Data Engi-neering (ICDE'06), 2006, p. 92.
53. A. Schaad and J. D. Moffett, A framework for organisational control principles," in ACSAC, 2002, pp. 229{238.
54. A. Schaad, V. Lotz, and K. Sohr, A modelchecking approach to analysing organisational controls in a loan origination process," in SAC-MAT, 2006, pp. 139{149.
55. S. Ghanavati, A. Siena, D. Amyot, A. Susi, and A. Perini, Towards a framework for business process compliance," in Proceedings of the Inter-national Workshop on Goal-Based Process Engi-neering (WGBP'10), 2010.
56. N. Desai, N. C. Narendra, and M. P. Singh, Checking correctness of business contracts via commitments," in 7th international joint confer-ence on Autonomous agents and multiagent sys-tems - Volume 2, 2008, pp. 787{794.
57. J. M. Kuester, K. Ryndina, and H. Gall, Generation of business process models for object life cycle compliance," in Proceedings of the Busi-ness Process Management Conference (BPM), ser. LNCS, 2007, pp. 165{181.
58. J. Yu, T. Manh, J. Han, Y. Jin, Y. Han, and J. Wang, Pattern based property specication and verication for service composition," in Web Information Systems (WISE), ser. LNCS, 2006, vol. 4255, pp. 156{168.
59. M. Weidlich, A. Polyvyanyy, N. Desai, J. Mendling, and M. Weske, Process compliance analysis based on behavioural proles," Information Systems, vol. 36, no. 7, pp. 1009 { 1025, 2011.
60. D. Schumm, F. Leymann, Z. Ma, T. Scheibler, and S. Strauch, Integrating Compliance into Business Processes: Process Fragments as Reusable Compliance Controls," in Multikon-ferenz Wirtschaftsinformatik (MKWI'10), 2010, pp. 2125{2137.
61. W. Arsac, L. Compagna, G. Pellegrino, and S. Ponta, Security validation of business processes via model-checking," in Engineering Se-cure Software and Systems, ser. LNCS, 2011, vol. 6542, pp. 29{42.
62. W. M. P. van der Aalst, M. Dumas, C. Ouyang, A. Rozinat, and E. Verbeek, Conformance checking of service behavior," ACM Trans. In-ternet Technol., vol. 8, pp. 13:1{13:30, May 2008.
63. M. Baldoni, C. Baroglio, I. Brunkhorst, N. Henze, E. Marengo, and V. Patti, Constraint modeling for curriculum planning and validation," International Journal of Interactive Learning Environments, vol. 19, no. 1, pp. 83{ 123, 2008.
64. S. S. Guido Governatori, Zoran Milosevic, Compliance checking between business processes and business contracts," in Proceedings of the 10th IEEE International Enterprise Distributed Ob-ject Computing Conference (EDOC'06), 2006, pp. 221{232.
65. R. Lu, S. Sadiq, and G. Governatori, Measurement of compliance distance in business work practice," Information Systems Manage-ment, no. 25, pp. 344{355, 2008.
66. S. Sadiq and G. Governatori, Managing regulatory compliance in business processes," in Handbook on Business Process Management 2, J. Brocke and M. Rosemann, Eds., 2010, pp. Springer Berlin Heidelberg{175.
67. D. Schumm, O. Tueretken, K. Natallia, E. Amal, L. Frank, and v. d. H. Willem Jan, Business process compliance through reusable units of compliant processes," in Proceedings of the 1st Workshop on Engineering SOA and the Web (ESW'10), 2010, pp. 325{337.