Towards a framework for semantic business process compliance management

CEUR Workshop Proceedings

Volumn 339, Issue , 2008, Pages 1-15

  El Kharbili, Marwane ^a   Stein, Sebastian ^a   Markovic, Ivan ^b   Pulvermüller, Elke ^c  

^a IDS SCHEER AG   (Germany)

^b SAP RESEARCH   (Germany)

^c UNIVERSITY OF OSNABRÜCK   (Germany)

Author keywords

Business Process Management; Business Rule; Compliance Management; Ontology; Policy

Indexed keywords

BUSINESS PROCESS COMPLIANCES; BUSINESS PROCESS MANAGEMENT; BUSINESS RULES; COMPLIANCE CHECKING; COMPLIANCE MANAGEMENT; LEGAL REGULATION; POLICY-BASED FRAMEWORK; STRATEGIC BUSINESS;

ENTERPRISE RESOURCE MANAGEMENT; INFORMATION SYSTEMS; MANAGEMENT SCIENCE; ONTOLOGY; PUBLIC POLICY; SEMANTICS;

COMPLIANCE CONTROL;

EID: 84885005456     PISSN: 16130073     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (37)

1. Hartman, T.E.: "The Cost of Being Public in the Era of Sarbanes-Oxley," August 2, 2007
2. Lev, B.: Where have all of Enron's Intangibles gone? Journal of Accounting and Public Policy. 21. pp. 131-135, (Summer 2002)
3. Agrawal, R., Johnson, C., Kiernan, J., Leymann, F.: Taming Compliance with SarbanesOxley Internal Controls Using Database Technology. In Proceedings of the 22nd International Conference on Data Engineering (ICDE'06). IEEE Press, 2006
4. Scheer, A.W.: ARIS - Business Process Frameworks. Third edition, Springer, Berlin (1999)
5. Scheer, A.W., Nüttgens, M.: ARIS Architecture and Reference Models for Business Process Management. In: Business Process Management, Lecture Notes in Computer Science, pp. 301-304. Springer Berlin / Heidelberg, January 2000
6. Text sections of the BASEL-II accord, http://www.basel-ii-accord.com/ BaselText.htm
7. Chapelle, A., Crama, Y. Hubner, G., Peeters, J.P.: Basel II and Operational Risk: Implications for risk measurement and management in the financial sector. Research series 200405-7, National Bank of Belgium, 2004
8. The ISO 17799 IT security standard: http://www.iso.org/iso/iso-catalogue/ catalogue-tc/catalogue-detail.htm?csnumber=39612.
9. The ISO 27002:2005 IT security standard http://www.iso.org/iso/iso- catalogue/catalogue-tc/catalogue-detail.htm?csnumber=50297
10. Congress of the United States. Public Company Accounting Reform and Investor Protection Act (Sarbanes-Oxley Act), 2002. Pub. L. No. 107-204, 116 Stat. 745
11. Markovic, I., Pereira, A.C.: Towards a Formal Framework for Reuse in Business Process Modeling. In Workshop on Advances in Semantics for Web services (semantics4ws), in conjunction with BPM '07, Brisbane, Australia, September 2007
12. Schmidt, R., Bartsch, C., Oberhauser, R.: Ontology-based representation of compliance requirements for service processes. In Proceedings of the Workshop on Semantic Business Process and Product Lifecycle Management (SBPM 2007), 2007
13. Zachman Framework, http://www.zifa.com/, http://www.zachmaninternational. com/
14. The Open Group. The Open Group Architectural Framework (TOGAF), http://www.togaf.org/, http://www-128.ibm.com/developerworks/ibm/library/ar- togaf1/
15. Zachman, J. A.: A framework for information systems architecture. IBM systems journal, Volume 26, No. 3, pp 276-292, 1987.
16. Zachman, J. A.: Extending and Formalizing the Framework for Information Systems Architecture. IBM Systems Journal, Volume 31, No. 3, 1992.
17. Uschold, M., King, M., Moralee, S., Zorgios, Y.: The Enterprise Ontology. The Knowledge Engineering Review, 1998. http://www.aiai.ed.ac.uk/project/ enterprise/enterprise/ontology.html.
18. Van Dongen, B.F., De Medeiros, A.K.A., Verbeek, H.M.W., Weijters, A.J.M.M., Van der Aalst, W.M.P.: The ProM Framework: A New Era in Process Mining Tool Support. In Applications and Theory of Petri Nets, Lecture Notes in Computer Science. Springer, 2005.
19. Rozinat, A., Van der Aalst, W. M. P.: Decision Mining in ProM. In Business process Management, Lecture Notes in Computer Science, Springer, 2006.
20. Markovic, I., Pereira, A.C., Stojanovic, N.: A Framework for Querying in Business Process Modelling. In Multikonferenz Wirtschaftsinformatik 2008, Munich, 2008.
21. Namiri, K., Stojanovic., N.: Towards Business Level Verification of Cross-Organizational Business Processes. In Workshop on Semantics for Business Process Management (SBPM07), Budva, Montenegro, 2006
22. Namiri, K., Stojanovic., N.: A Formal Approach for Internal Controls Compliance in Business Processes. In 8th Workshop on Business Process Modeling, Development, and Support (BPMDS07), Trondheim, Norway, 2007.
23. Huang, D.: Semantic policy-based security framework for business processes. In Proceedings of the Semantic Web and Policy Workshop. 4th International Semantic Web Conference, 7 November 2005, Galway, Ireland.
24. Karagiannis, D.: A Business process Based Modelling Extension for Regulatory Compliance. In Multikonferenz Wirtschaftsinformatik 2008, Munich, 2008.
25. Goedertier, S., Vanthienen, J.: Designing Compliant Business Processes from Obligations and Permissions, 2nd Workshop on Business Processes Design (BPD'06), 2006.
26. Governatori, G., Milosevic, Z., Sadiq, S.: Compliance checking between business processes and business contracts. In 10th International Enterprise Distributed Object Computing Conference (EDOC 2006). IEEE Press, pp. 221-232, 2006.
27. Karagiannis D., Mylopoulos J., Schwab M.: Business Process-Based Regulation Compliance: The Case of the Sarbanes-Oxley Act. In Proceedings of 15th IEEE International Requirements Engineering Conference, New Delhi, 2007.
28. Karagiannis D., Nemetz, M., Schwab M.: Dashboards for Monitoring Compliance to Regulations - A SOX-based Scenario. In Proceedings of IGO'06 - International Conference on Integrating Global Organizations, Siena, 2006.
29. Sadiq S., Governatori G., Namiri K.: Modeling Control Objectives for Business Process Compliance In Proceedings of the 5th International Conference, BPM 2007, Brisbane, Springer, 2007, pp. 149-164.
30. Kagal, L.: A Policy-Based Approach to Governing Autonomous Behavior in Distributed Environments. PhD Thesis, Faculty of the Graduate School of the University of Maryland, 2004.
31. Horrocks, I., Patel-Schneider, P.F., Boley, H., Tabet, S., Grosof, B., Dean, M.: SWRL: A Semantic Web Rule Language Combining OWL and RuleML. Acknowledged W3C Member Submission. May 21, 2004.
32. Scheer, A.-W.; Thomas, O.; Adam, O.: Process Modeling Using Event-driven Process Chains. In: Dumas, Marlon; van der Aalst, Willibrordus M. P.; ter Hofstede, Arthur H. M. (Hrsg.): Process-Aware Information Systems: Bridging People and Software Through Process Technology, pp. 119-145. Hoboken, New Jersey: Wiley, 2005.
33. OMG: Business Process Modeling Notation, V1.1. OMG specification, formal/2008-01-17, January 2008.
34. White, S.A.: Introduction to BPMN. In BPTrends, July 2004.
35. Uszok, A., Bradshaw, J., Jeffers, R., Suri, N., Hayes, P., Breedy, M., Bunch, L., Johnson, M. Kulkarni, S., Lott, J.: KAoS policy and domain services: toward a description-logic approach to policy representation, deconfliction, and enforcement. In Proceedings of POLICY 2003. the IEEE 4th International Workshop on policies for distributed systems and networks. Como, Italy, June 2003.
36. Jablonski, S., Bussler, C.: Workflow Management: Modeling Concepts. Architecture, and Implementation. International Thomson Computer Press, London, UK, 1996.
37. Curtis, B., Kellner, M.I., Over, J.: Process Modeling. Comm. of the ACM, 35(9):75, September 1992.