Enterprise Architecture Frameworks as Support for Implementation of Regulations: Approach and Experiences from GDPR

Abstract

Enterprise Architecture (EA) management has been discussed as being supportive for implementation of regulations in enterprises and organizations, but the role of EA frameworks in this context has not been addressed intensely. The EU General Data Protection Regulation (GDPR) is one of the most frequently discussed regulation in industry and research, and expected to cause a shift in viewpoint of enterprises from a technological perspective dominated by information security issues to an organizational perspective governed by GDPR-compliant organizational structures and processes. A well-documented Enterprise Architecture (EA) and a working Enterprise Architecture Management (EAM) are expected to significantly ease the roadmap planning for GDPR implementation. Therefore, this article focuses on the practice of EA use for GDPR implementation. The main contributions of this article are (a) an analysis and comparison of existing architecture frameworks and how they address security-related issues, and (b) a case study from financial industries illustrating the use of EA for implementing GDPR compliance.

Implementation of The Open Group Architecture Framework to See the Readiness of Smart Schools in Pekanbaru

“…There are several methods or frameworks that are commonly used in designing enterprise architectures, namely The Zachman Framework for Enterprise Architectures [8], The Open Group Architecture Framework (TOGAF) [9], The Federal Enterprise Architecture Framework (FEAF) [10], and Gartner (Meta Framework) [11]. TOGAF ADM is a flexible method that can identify various modeling techniques used in planning because this method can be adjusted to changes and needs during the design.…”