Enforcing compliance on business processes through the use of patterns

19th European Conference on Information Systems, ECIS 2011

Volumn , Issue , 2011, Pages

  Turetken, Oktay ^a   Elgammal, Amal ^a   Van Den Heuvel, Willem Jan ^a   Papazoglou, Mike ^a  

^a TILBURG UNIVERSITY   (Netherlands)

Author keywords

Business process compliance; Compliance model; Compliance pattern; Compliance requirement; Internal control; Regulatory compliance

Indexed keywords

BUSINESS PROCESS; COMPLIANCE MODEL; COMPLIANCE PATTERN; COMPLIANCE REQUIREMENT; INTERNAL CONTROLS;

INFORMATION SYSTEMS;

REGULATORY COMPLIANCE;

EID: 84870647291     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (33)

1. Abdullah, N. S., Indulska, M. and Sadiq, S. (2009). A study of compliance management in information systems research, ECIS'09, Verona, Italy, pp. 1-10.
2. COBIT (2007). Control Objectives for Inf. and related Technology - COBIT, 4.1. IT Governance Institute.
3. COSO (1994). Internal Control - Integrated Framework. The Committee of Sponsoring Organizations of the Treadway Commission.
4. Directive 2008/30/EC (2008). Directive 2008/30/EC: Amd. to 2006/43/EC on statutory audits of annual accounts and consolidated accounts, The European Parliament & The Council of the EU.
5. Dwyer, M., Avrunin, G. and Corbett, J. (1998). Property Specification Patterns for Finite-State Verification, 2nd International workshop on Formal Methods on Software Practice, USA, pp. 7-15.
6. Elgammal, A., Turetken, O., van den Heuvel, W. and Papazoglou, M. (2010). Root-Cause Analysis of Design-time Compliance Violations on the basis of Property, ICSOC'10, San Francisco, pp. 17-31.
7. ERM (2004). Enterprise Risk Management - Integrated Framework. The Committee of Sponsoring Organizations of the Treadway Commission.
8. Ernst & Young (2010). The Top 10 Risks For Business, The Ernst & Young Business Risk Report 2010.
9. Frank, U. (2002). Multi-perspective enterprise modeling: Conceptual framework and modeling languages, The Annual Hawaii Int. Conference on System Sciences (HICSS), Honululu, HI, pp. 72-82.
10. Ghose, A. and Koliadis, G. (2007). Auditing Business Process Compliance, In Service-Oriented Computing - ICSOC07, Vol. 4749, Springer Berlin / Heidelberg, pp. 169-180.
11. Governatori, G., Milosevic, Z. and Sadiq, S. (2006). Compliance Checking Between Business Processes and Business Contracts, EDOC'06, Hong Kong pp. 221-232.
12. Gruhn, V. and Laue, R. (2005). Specification Patterns for Time-Related Properties, 12th Int'l Symposium on Temporal Representation and Reasoning, USA, pp. 198-191.
13. Hevner, A., March, S., Park, J. and Ram, S. (2004). Design Science in Information Systems Research, MIS Quarterly, 28 (1), pp. 75-105.
14. HIPAA (1996). The Health Insurance Portability and Accountability Act, U.S. Congress.
15. IFRS (2001). International Financial Reporting Standards. International Accounting Standards Board.
16. ISO/IEC (2009). ISO/IEC 27000:2009 - Information security management systems - Overview and vocab.
17. Kharbili, M. and Keil, T. (2010). Bringing Agility to Business Process Management: Rules Deployment in an SOA, In Emerging Web Services Technology, Vol. III, Birkhäuser Basel, pp. 157-170.
18. Koliadis, G. and Ghose, A. K. (2008). Service Compliance: Towards Electronic Compliance Programs, Tech. Rep. TR2008-01, Decision Systems Lab, University of Wollongong.
19. Liu, Y., Muller, S. and Xu, K. (2007). A Static Compliance-Checking Framework for Business Process Models, IBM Systems Journal, 46.
20. Ly, L., Rinderle-Ma, S., Göser, K. and Dadam, P. (2009). On enabling integrated process compliance with semantic constraints in process management systems, Information Systems Frontiers, 1-25.
21. Namiri, K. and Stojanovic, N. (2007). Pattern-based Design and Validation of Business Process Compliance, In Lecture Notes in Computer Science, Vol. 4803, pp. 59-76.
22. OASIS (2007). Web Services Business Process Execution Language (WS-BPEL), Version 2.0.
23. OCEG (2009). GRC Capability Model, Ver 2.0. Open Compliance and Ethics Group.
24. OMG (2010). Business Process Model and Notation (BPMN), Version 2.0 (Beta 2).
25. Papazoglou, M. P. and Heuvel, W.-J. v. d. (2007). Business process development life cycle methodology, Commun. ACM, 50 (10), pp. 79-85.
26. Pnueli, A. (1977). The Temporal Logic of Programs, 18th IEEE Symposium on Foundations of Computer Science, Providence, pp. 46-57.
27. Sadiq, S., Governatori, G. and Namiri, K. (2007). Modeling Control Objectives for Business Process Compliance, Business Process Management, Brisbane, Australia, pp. 149-164.
28. Scheer, A.-W. (2000). ARIS: Business Process Modeling, 3rd. Ed., Springer.
29. SOX (2002). Sarbanes-Oxley Act of 2002, U.S. Congress.
30. Strecker, S., Heise, D. and Frank, U. (2010). RiskM: A multi-perspective modeling method for IT risk assessment, Information Systems Frontiers, 1-17, DOI: 10.1007/s10796-010-9235-3.
31. van der Aalst, W. M. P., Beer, H. and van Dongen, B. F. (2005). Process Mining and Verification of Properties: An Approach based on Temporal Logic, International Conference on Cooperative Information Systems (CoopIS'05), Cyprus, pp. 130-147.
32. Yu, J., Manh, T., Han, J. and Jin, Y. (2006). Pattern Based Property Specification and Verification for Service Composition, Web Information Systems Engineering (WISE06), China, pp. 156-168.
33. Zur Muehlen, M. and Rosemann, M. (2005). Integrating Risks in Business Process Models, Australasian Conf. on Information Systems (ACIS 2005), 29 Nov - 2 Dec 2005, Sydney, Australia, pp. 62-72.