Exploring Features of a Full-Coverage Integrated Solution for Business Process Compliance

Cabanillas, Cristina; Resinas, Manuel; Ruiz–Cortés, Antonio

doi:10.1007/978-3-642-22056-2_24

Cited by 4 publications

(8 citation statements)

References 18 publications

(31 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Besides, the solution must cover all the compliance-related features described in [9], giving rise to a full-coverage BPCMS. Therefore, we are studying how to extend the approach presented in this paper to address more types of BP compliance (e.g.…”

Section: Discussionmentioning

confidence: 99%

See 1 more Smart Citation

Introducing a Mashup-Based Approach for Design-Time Compliance Checking in Business Processes

Cabanillas

Resinas

Ruiz–Cortés

2012

Progress in Pattern Recognition, Image Analysis, Computer Vision, and Applications

Self Cite

View full text Add to dashboard Cite

Abstract. Business process compliance tries to ensure the business processes used in an organization are designed and executed according to the rules that govern the company. However, the nature of rules (expressed in natural language) and the large amount of elements that can be involved in them make their materialization and automated checking quite difficult. That is why the existing support for compliance checking is generally restricted to specific kinds of rules (e.g. rules affecting the control flow of the process). In this paper, we introduce compliance mashups, and show how a mashup-based approach can help solve the problem of rule specification and checking at design time. Some advantages of such an approach are that: (i) any kind of rule can be specified, which implies that each user can specify a rule according to his/her interpretation of the rule; (ii) building the compliance mashup is transparent to the formalism(s) used to implement it, so different techniques can be used together; and (iv) mashup components or parts of them can be re-used. As an example we use this approach to build mashups to specify and check rules related to human resource management in business processes at design time.

show abstract

Section: Discussionmentioning

confidence: 99%

“…ProM [7], a tool for process mining, contains plugins to perform this kind of compliance checking, mostly focused on control flow issues [8]. A summary of features that should be considered when developing a BP compliance management system (BPCMS) that covers all the phases of the BP life cycle was introduced in [9].…”

Section: Introductionmentioning

confidence: 99%

Introducing a Mashup-Based Approach for Design-Time Compliance Checking in Business Processes

Cabanillas

Resinas

Ruiz–Cortés

2012

Progress in Pattern Recognition, Image Analysis, Computer Vision, and Applications

Self Cite

View full text Add to dashboard Cite

show abstract

“…Different reference processes have been proposed in the literature to support compliance management [5,6,27,32]. Figure 2 presents a simplified compliance management lifecycle covering the main activities of these processes.…”

Section: Compliance In Softwarementioning

confidence: 99%

“…Although some authors have discussed the concept of compliance improvement [11,5,18], there is a lack of automated support. Cabanillas et al [5] state the need to provide recovery capabilities when compliance violations are detected at runtime. Ly et al [18] discuss the notion of healable compliance violations, i.e.…”

Section: Planmentioning

confidence: 99%

Towards adaptive compliance

García-Galán

Pasquale

Grispos

et al. 2016

Proceedings of the 11th International Symposium on Software Engineering for Adaptive and Self-Managing Systems

View full text Add to dashboard Cite

Mission critical software is often required to comply with multiple regulations, standards or policies. Recent paradigms, such as cloud computing, also require software to operate in heterogeneous, highly distributed, and changing environments. In these environments, compliance requirements can vary at runtime and traditional compliance management techniques, which are normally applied at design time, may no longer be sufficient. In this paper, we motivate the need for adaptive compliance by illustrating possible compliance concerns determined by runtime variability. We further motivate our work by means of a cloud computing scenario, and present two main contributions. First, we propose and justify a process to support adaptive compliance that extends the traditional compliance management lifecycle with the activities of the Monitor-Analyse-Plan-Execute (MAPE) loop, and enacts adaptation through re-configuration. Second, we explore the literature on software compliance and classify existing work in terms of the activities and concerns of adaptive compliance. In this way, we determine how the literature can support our proposal and what are the open research challenges that need to be addressed in order to fully support adaptive compliance.

show abstract

“…In this paper we introduce a conceptual framework for forward compliance checking that, besides supporting most of the Compliance Monitoring Funcionalities (CMFs) identified and addressed in the literature [5], tackles the needs encountered when building and deploying a fullyfledged Business Process Compliance Management System (BPCMS) [8] in a real organisation. These needs, related to the heterogeneity of the ISs and the number and variability of compliance rules, can be covered if three requirements are met.…”

Section: Introductionmentioning

confidence: 99%

A Mashup-Based Framework for Business Process Compliance Checking

Cabanillas

Resinas

Ruiz–Cortés

2022

IEEE Trans. Serv. Comput.

Self Cite

View full text Add to dashboard Cite

Business process compliance ensures that the business processes of an organisation are designed and executed according to the rules that enforce the compliance controls that govern the company. We faced the challenge of building a Business Process Compliance Management System (BPCMS) for a process-aware organisation that had to provide support for several needs that, despite having been identified in the literature, were only partially satisfied by existing approaches. The variability in the types of rules and their interpretation generally restricts the existing support for compliance checking to specific types of rules (e.g., rules affecting the control flow of the process), a specific phase of the business process management (BPM) lifecycle (e.g., design time or run time), or certain information systems (ISs) for data retrieval (e.g., process event logs). Motivated by this, we designed a conceptual framework for design-time and run-time compliance checking that relies on the use of mashups for rule specification and checking. It presents the following advantages: (i) an open-ended set of types rules can be specified by designing and connecting mashup components; (ii) (parts of) the definitions of the rules can be reused as needed; and (iii) the mashup-based compliance checking (MCC) system can be integrated with ISs of the organisation, enabling the verification of actual facts on actions performed during the execution of a process (e.g., the existence of a specific document in a concrete location). Design-time and run-time implementations of the framework were conducted and tested in a real setting.

show abstract

Exploring Features of a Full-Coverage Integrated Solution for Business Process Compliance

Cited by 4 publications

References 18 publications

Introducing a Mashup-Based Approach for Design-Time Compliance Checking in Business Processes

Introducing a Mashup-Based Approach for Design-Time Compliance Checking in Business Processes

Towards adaptive compliance

A Mashup-Based Framework for Business Process Compliance Checking

Contact Info

Product

Resources

About