Compliance Flow – Managing the compliance of dynamic and complex processes

Chung, Pei-Jung; Cheung, L.; Machin, Colin H. C.

doi:10.1016/j.knosys.2007.11.002

Cited by 24 publications

(26 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…are being investigated under different perspectives, most of them product-based ones. Exceptions to this product-based focus are the contributions presented in [21][22][23].…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Enabling Cross-Domain Reuse of Tool Qualification Certification Artefacts

Gallina

Kashiyarandi

Zugsbratl

et al. 2014

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Abstract. The development and verification of safety-critical systems increasingly relies on the use of tools which automate/replace/supplement complex verification and/or development tasks. The safety of such systems risks to be compromised, if the tools fail. To mitigate this risk, safety standards (e.g. DO-178C/DO330, IEC 61508) define prescriptive tool qualification processes. Compliance with these processes can be required for (re-)certification purposes. To enable reuse and thus reduce time and cost related to certification, cross-domain tool manufacturers need to understand what varies and what remains in common when transiting from one domain to another. To ease reuse, in this paper we focus on verification tools and model a cross-domain tool qualification process line. Finally, we discuss how reusable cross-domain process-based arguments can be obtained.

show abstract

“…are being investigated under different perspectives, most of them product-based ones. Exceptions to this product-based focus are the contributions presented in [21][22][23].…”

Section: Related Workmentioning

confidence: 99%

“…In [21], the authors propose a workflow-based approach to provide: 1) reference models for the safety processes mandated by the standards and 2) automatic compliance checking capabilities of user-defined processes against reference models. However, the authors focus on single standards and do not investigate reuse possibilities.…”

Section: Related Workmentioning

confidence: 99%

Enabling Cross-Domain Reuse of Tool Qualification Certification Artefacts

Gallina

Kashiyarandi

Zugsbratl

et al. 2014

Lecture Notes in Computer Science

View full text Add to dashboard Cite

show abstract

“…For instance, Trinh et al 2009 monitor time constraints during the execution of process activities, using UML Timing Diagrams to specify constraints and Aspect Oriented Programming to control executions. Chung et al 2008 check if the user-defined process is compliant to pre-defined ontology and a specific model, in which compliance requirements are described. An IBM research group (Giblin et al, 2006) advocates the use of the REALM (Regulations Expressed As Logical Models) metamodel to define temporal compliance rules and the Active Correlation Technology to check them.…”

Section: Related Workmentioning

confidence: 99%

Aiding Compliance Governance in Service-Based Business Processes

Silveira

Rodríguez

Birukou

et al. 2012

Handbook of Research on Service-Oriented Systems and Non-Functional Properties

View full text Add to dashboard Cite

Assessing whether a company’s business practices conform to laws and regulations and follow standards and SLAs, i.e., compliance management, is a complex and costly task. Few software tools aiding compliance management exist; yet, they typically do not address the needs of who is actually in charge of assessing and understanding compliance. We advocate the use of a compliance governance dashboard and suitable root cause analysis techniques that are specifically tailored to the needs of compliance experts and auditors. The design and implementation of these instruments are challenging for at least three reasons: (1) it is fundamental to identify the right level of abstraction for the information to be shown; (2) it is not trivial to visualize different analysis perspectives; and (3) it is difficult to manage and analyze the large amount of involved concepts, instruments, and data. This chapter shows how to address these issues, which concepts and models underlie the problem, and, eventually, how IT can effectively support compliance analysis in Service-Oriented Architectures (SOAs).

show abstract

“…One may refine indefinitely the model but the difference between the model and the real-world phenomenon, process or dynamical system which is subject to modelling cannot be avoided [10,22,34,45,49]. Increasing the quality of the models has been one of the favourite research directions during the last years.…”

Section: Introductionmentioning

confidence: 99%