An iterative approach to synthesize business process templates from compliance rules

Abstract

a b s t r a c tCompanies have to adhere to compliance requirements. The compliance analysis of business operations is typically a joint effort of business experts and compliance experts. Those experts need to create a common understanding of business processes to effectively conduct compliance management. In this paper, we present a technique that aims at supporting this process. We argue that process templates generated out of compliance requirements provide a basis for negotiation among business and compliance experts. We introduce a semi-automated and iterative approach to the synthesis of such process templates from compliance requirements expressed in Linear Temporal Logic (LTL). We show how generic constraints related to business process execution are incorporated and present criteria that point at underspecification. Further, we outline how such underspecification may be resolved to iteratively build up a complete specification. For the synthesis, we leverage existing work on process mining and process restructuring. However, our approach is not limited to the control-flow perspective, but also considers direct and indirect data-flow dependencies. Finally, we elaborate on the application of the derived process templates and present an implementation of our approach.

Enhancing Unsatisfiable Cores for LTL with Information on Temporal Relevance

“…3 considered with UC extraction without sets of time points, a UC was obtained for 611. With sets of time points enabled one instance more 4 and one instance less are solved. An analysis by category (for plots see App.…”

“…Checks for vacuous specifications, which are closely related to UCs [36], are an important feature of industrial hardware verification tools (see, e.g., [7,3]). In the academic world UCs are an important part of design methods for embedded systems (e.g., [30]) as well as for business processes (e.g., [4]). Despite this relevance of UCs efforts to provide additional information in the context of UCs or vacuity have remained isolated (e.g., [38]).…”

Enhancing unsatisfiable cores for LTL with information on temporal relevance

“…In particular, out of the 698 instances we considered with UC extraction without sets of time points, a UC was obtained for 611. With sets of time points enabled one instance more 4 and one instance less are solved. An analysis by category (for plots see App.…”

“…It first appears in the context of a UC extraction algorithm that is complete only for a strict subset of LTL. Later [36] proposes example (4) and conjectures that sets of time points can be obtained from a tableau method and that these sets are semilinear. Some work [31,6] determines the time points at which propositions in witnesses of satisfiable LTL formulas are relevant for satisfiability.…”

No Time for Compliance

“…Given that the personal information was destroyed the entity was excused from the violation of the rst section (illegal collection of personal information). However, even if the entity was excused from the illegal collection, they were never entitled (i.e., permitted) to collect personal information 5 , consequently they were not permitted to collect medical information; thus the prohibition of collecting medical information was in force. Accordingly, the collection of medical information violates the norm forbidding such an activity.…”