Using patterns for the analysis and resolution of compliance violations

A.F.S.A. El Gammal, O. Turetken, W.J.A.M. van den Heuvel

    Research output: Contribution to journalArticleScientificpeer-review

    Abstract

    Today's enterprises demand a high degree of compliance of business processes to meet laws and regulations, such as Sarbanes-Oxley and Basel II. Compliance should be enforced during all phases of business process lifecycle, from the phases of analysis and design to deployment, monitoring and evaluation. In this paper, a taxonomy of compliance constraints for business processes is introduced based on the notion of compliance patterns. Patterns facilitate the formal specification of compliance constraints that enable their verification and analysis against business process models. This taxonomy serves as the backbone of the root-cause analysis, which is conducted to reason about and eventually to resolve design-time compliance violations, by providing appropriate guidelines as remedies to alleviate design-time compliance deviations. We have developed and integrated a set of tools to observe and evaluate the applicability of our approach, and experiment with it in case studies.
    Original languageEnglish
    Pages (from-to)31-54
    JournalInternational Journal of Cooperative Information Systems, IJCIS
    Volume21
    Issue number1
    DOIs
    Publication statusPublished - 2012

    Fingerprint

    Taxonomies
    Industry
    Compliance
    Monitoring
    Experiments
    Formal specification

    Cite this

    @article{7ac170b3c1b645bf93b907569415e165,
    title = "Using patterns for the analysis and resolution of compliance violations",
    abstract = "Today's enterprises demand a high degree of compliance of business processes to meet laws and regulations, such as Sarbanes-Oxley and Basel II. Compliance should be enforced during all phases of business process lifecycle, from the phases of analysis and design to deployment, monitoring and evaluation. In this paper, a taxonomy of compliance constraints for business processes is introduced based on the notion of compliance patterns. Patterns facilitate the formal specification of compliance constraints that enable their verification and analysis against business process models. This taxonomy serves as the backbone of the root-cause analysis, which is conducted to reason about and eventually to resolve design-time compliance violations, by providing appropriate guidelines as remedies to alleviate design-time compliance deviations. We have developed and integrated a set of tools to observe and evaluate the applicability of our approach, and experiment with it in case studies.",
    author = "{El Gammal}, A.F.S.A. and O. Turetken and {van den Heuvel}, W.J.A.M.",
    year = "2012",
    doi = "10.1142/s0218843012400023",
    language = "English",
    volume = "21",
    pages = "31--54",
    journal = "International Journal of Cooperative Information Systems, IJCIS",
    issn = "0218-8430",
    publisher = "World Scientific Publishing Co. Pte Ltd",
    number = "1",

    }

    Using patterns for the analysis and resolution of compliance violations. / El Gammal, A.F.S.A.; Turetken, O.; van den Heuvel, W.J.A.M.

    In: International Journal of Cooperative Information Systems, IJCIS, Vol. 21, No. 1, 2012, p. 31-54.

    Research output: Contribution to journalArticleScientificpeer-review

    TY - JOUR

    T1 - Using patterns for the analysis and resolution of compliance violations

    AU - El Gammal, A.F.S.A.

    AU - Turetken, O.

    AU - van den Heuvel, W.J.A.M.

    PY - 2012

    Y1 - 2012

    N2 - Today's enterprises demand a high degree of compliance of business processes to meet laws and regulations, such as Sarbanes-Oxley and Basel II. Compliance should be enforced during all phases of business process lifecycle, from the phases of analysis and design to deployment, monitoring and evaluation. In this paper, a taxonomy of compliance constraints for business processes is introduced based on the notion of compliance patterns. Patterns facilitate the formal specification of compliance constraints that enable their verification and analysis against business process models. This taxonomy serves as the backbone of the root-cause analysis, which is conducted to reason about and eventually to resolve design-time compliance violations, by providing appropriate guidelines as remedies to alleviate design-time compliance deviations. We have developed and integrated a set of tools to observe and evaluate the applicability of our approach, and experiment with it in case studies.

    AB - Today's enterprises demand a high degree of compliance of business processes to meet laws and regulations, such as Sarbanes-Oxley and Basel II. Compliance should be enforced during all phases of business process lifecycle, from the phases of analysis and design to deployment, monitoring and evaluation. In this paper, a taxonomy of compliance constraints for business processes is introduced based on the notion of compliance patterns. Patterns facilitate the formal specification of compliance constraints that enable their verification and analysis against business process models. This taxonomy serves as the backbone of the root-cause analysis, which is conducted to reason about and eventually to resolve design-time compliance violations, by providing appropriate guidelines as remedies to alleviate design-time compliance deviations. We have developed and integrated a set of tools to observe and evaluate the applicability of our approach, and experiment with it in case studies.

    U2 - 10.1142/s0218843012400023

    DO - 10.1142/s0218843012400023

    M3 - Article

    VL - 21

    SP - 31

    EP - 54

    JO - International Journal of Cooperative Information Systems, IJCIS

    JF - International Journal of Cooperative Information Systems, IJCIS

    SN - 0218-8430

    IS - 1

    ER -