Article2010

Integrating Compliance into Business Processes: Process Fragments as Reusable Compliance Controls

David Schumm · Frank Leymann · Zhilei Ma · Thorsten Scheibler · Steve Strauch

50 citations0/0 files stored

No readable copy stored yet — this record is metadata only.

No open-access location is known for this record yet.

Literature note Cite in a project Citation map

Business Process Modeling and Analysis Advanced Software Engineering Methodologies Governance, Compliance, and Sustainability

Abstract

Companies increasingly have to pay attention to compliance concerns addressing business processes. Flexibly reacting to changing requirements coming from laws, regulations, and internal guidelines becomes a necessary part of business process management. Compliance refers therein to the entirety of all measures that need to be taken in order to adhere to laws, regulations and guidelines within the company, subsumed as compliance sources (Daniel et al., 2009, p. 1). In order to comply, companies need to perform profound changes in their organizational structure, business processes, IT systems and applications that drive their business. At this, process-awareness is basic prerequisite for ascertaining whether existing business processes are set up to operate in a compliant manner (Caprasse et al., 2008, p. 14). Among other steps, a compliance office can be installed, role-management is being established, and controls are integrated into particular processes. Consequently, compliance also has an impact on IT systems, applications and supporting infra-structure, as they have to support the execution, monitoring and checking of com-pliance issues. Yet, in the field of Business Process Management (BPM) there is currently no agreed upon solution for enabling a flexible management of compliance require-ments resulting from the interpretation of various compliance sources. There is no ultimate solution that allows to integrate compliance into processes or IT systems, and which specifies, how the execution of processes can be monitored to validate a compliant execution. The integration of compliance thus often results in hard-wired changes and tangled code. Another shortcoming of current solutions is that they do not address the whole compliance management life cycle (Daniel et al.,

Paper brief

Loading…

Cite this work

Citation unavailable for this work.

BibTeX RIS CSL-JSON

No public copy is stored for this record, so only the metadata is cited.

Citations in this library

Citation map →

Stored only when both papers are in the corpus — 50 citations exist upstream.

References

2007Modeling Control Objectives for Business Process Compliance 2007Generation of Business Process Models for Object Life Cycle Compliance 2007Modeling of Task-Based Authorization Constraints in BPMN 2009Process Fragments 2006Proviado – Personalized and Configurable Visualizations of Business Processes

Cited by

2011An Architecture and Methodology for a Four-Phased Approach to Green Business Process Reengineering 2011Process Fragment Libraries for Easier and Faster Development of Process-based Applications 2011Fragmento: Advanced Process Fragment Library 2010An Integrated Solution for Runtime Compliance Governance in SOA 2011Proactive Business Process Compliance Monitoring with Event-Based Systems 2011On Maintaining Consistency of Process Model Variants 2016Mining variable fragments from process event logs 2010Compliant Business Process Design Using Refinement Layers

Explore the map →

Papers that cite the same references — the relational fallback while embeddings are still backfilling.

Imported from OpenAlex (CC0) — nothing here is generated.