An Algorithm-Centric Approach to Enhance Business Process Compliance Management

Abstract:

The diversity of enterprise domains is one of the significant factors that add to the challenges confronting organizations when managing compliance, and it, therefore, contributes to the cost of compliance. In particular, there is an indication that the inadequacy of a general approach to analyzing compliance documents impedes adequate compliance management practice. Taking an algorithmic-centric approach to tackling this challenge, this paper proposed algorithms and techniques intended to aid useful extraction, classification and analysis of dataflow, control flow, and time constraints in compliance management domain for different stakeholders. The algorithms and techniques were implemented and validated through two case studies and afterward evaluated for its adoption in practice.

• Periodical: International Journal of Engineering Research in Africa (Volume 50)
• Pages: 15-28
• DOI: https://doi.org/10.4028/www.scientific.net/JERA.50.15
• Online since: September 2020
• Authors: Oluwasefunmi.T. Arogundade, Sanjay Misra*, Modupe Odusami, Eniola Adelaja, Olusola Abayomi-Alli
• Keywords: Business Process, Compliance Management, Compliance Requirements, Regulatory Documents

References

[1] Governatori, G. and Rotolo, A.,: A conceptually rich model of business process compliance. In Proceedings of the Seventh Asia-Pacific Conference on Conceptual Modelling-Volume 110 (pp.3-12). Australian Computer Society, Inc. (2010).

[2] Hashmi, M., Governatori, G. and Wynn, M.T., : Business process data compliance. In International Workshop on Rules and Rule Markup Languages for the Semantic Web (pp.32-46). Springer, Berlin, Heidelberg (2012).

DOI: 10.1007/978-3-642-32689-9_4

[3] Galván-Cruz, S., Mora, M., O'Connor, R., Acosta-Escalante, F. and Alvarez, F., : A compliance analysis of agile methodologies with the ISO/IEC 29110 project management process.(2015).

DOI: 10.1016/j.procs.2015.08.480

[4] Shamsaei, A., Amyot, D. and Pourshahid, A., :A systematic review of compliance measurement based on goals and indicators. In International Conference on Advanced Information Systems Engineering (pp.228-237). Springer, Berlin, Heidelberg.(2011).

[5] S. Turki and M. Bjekovic-Obradovic, : Compliance in e-government service engineering: State of the art, In Exploring Services Science,, vol. 53 (2010).

[6] Schumm, D., Leymann, F., Ma, Z., Scheibler, T. and Strauch, S.,: Integrating compliance into business processes. In Multikonferenz Wirtschaftsinformatik (Vol. 2010, p.421). (2010).

DOI: 10.17875/gup2010-1462

[7] Cardoso, E.C., Guizzardi, R.S. and Almeida, J.P.A., :Aligning goal analysis and business process modelling: a case study in healthcare. International Journal of Business Process Integration and Management, 5(2), pp.144-158 (2011).

DOI: 10.1504/ijbpim.2011.040206

[8] S. Turki and M. Bjekovic-Obradovic. :Compliance in e-government service engineering: State of the art, In Exploring Services Science,, vol. 53 (2010).

[9] Elgammal, A., Sebahi, S., Türetken, O., Hacid, M.S., Papazoglou, M. and van den Heuvel, W.J.A.M., :Business process compliance management: an integrated proactive approach. In conference; 24th International Business Information Management Association Conference; 2014-11-06; 2014-11-07 (pp.764-781). International Business Information Management Association (IBIMA).(2014).

DOI: 10.1109/icbim32849.2014

[10] Papazoglou, M.P., 2011, August. Making business processes compliant to standards and regulations. In 2011 IEEE 15th International Enterprise Distributed Object Computing Conference (pp.3-13). IEEE.

DOI: 10.1109/edoc.2011.37

[11] Steffens, A., Lichter, H. and Moscher, M., 2018. Towards Data-driven Continuous Compliance Testing. In Software Engineering (Workshops) (pp.78-84).

[12] Liu, N., Wing-Hung Lo, C. and Zhan, X., 2019. Regulatory Ties and Corporate Compliance Strategies. Public Performance & Management Review, 42(3), pp.580-605.

DOI: 10.1080/15309576.2018.1486214

[13] L. Ly, S. Rinderle-Ma, K. G• oser, and P. Dadam, 2009, Enabling integrated process compliance with semantic constraints in process management systems, Information Systems Frontiers,, pp.1-25.

DOI: 10.1007/s10796-009-9185-9

[14] Accorsi, R., 2011, July. Business process as a service: Chances for remote auditing. In 2011 IEEE 35th Annual Computer Software and Applications Conference Workshops (pp.398-403). IEEE.

DOI: 10.1109/compsacw.2011.73

[15] A. Elgammal, O. Turetken, W. van den Heuvel, and M. Papazoglou, 2010, Formal specification of regulatory compliance: A comparative analysis." ICSOC10 Workshops.

DOI: 10.1007/978-3-642-19394-1_4

[16] Michael P. Papazoglou. Making Business Processes Compliant to Standards and Regulations", 2011 IEEE 15th International Enterprise Distributed Object Computing Conference, 2011 "Access control for business processes,, in security for Web Services and Service-Oriented Architectures, E. Bertino, L. Martino, F. Paci, and A. Squicciarini, 2010, pp.159-177.

DOI: 10.1109/edoc.2011.37

[17] Mustapha, A.M., Arogundade, O.T., Vincent, O.R. Adeniran O.J. (2018): Towards a compliance requirement management for SMSEs: a model and architecture Inf. Syst. and E-Bus Manage. (16),.

DOI: 10.1007/s10257-017-0354-y

[18] Turetken, O., Elgammal, A., van den Heuvel, W.J. and Papazoglou, M.P., 2012. Capturing compliance requirements: A pattern-based approach. IEEE software, 29(3), pp.28-36.

DOI: 10.1109/ms.2012.45

[19] Becker, J., Thome, I., Weiß, B. and Winkelmann, A., 2010. Constructing a semantic business process modelling language for the banking sector-an evolutionary dyadic design science approach. Enterprise Modelling and Information Systems Architectures (EMISAJ), 5(1), pp.4-25.

[20] Allahyari, M., Pouriyeh, S. A., Assefi, M., Safaei, S., Trippe, E. D., Gutierrez, J. B., &Kochut, K. J. (2017). A brief survey of text mining: classification, clustering and extraction techniques. CoRR, abs/1707.02919.

DOI: 10.14569/ijacsa.2017.081052

[21] Tsangaratos, P., & Ilia, I. (2016). Comparison of a logistic regression and Naïve Bayes classifier in landslide susceptibility assessments: The influence of models complexity and training dataset size. Catena, 145, 164– 179.

DOI: 10.1016/j.catena.2016.06.004

[22] Wohlrab, R., Knauss, E., Steghöfer, J.P., Maro, S., Anjorin, A. and Pelliccione, P., 2018. Collaborative traceability management: a multiple case study from the perspectives of organization, process, and culture. Requirements Engineering, pp.1-25.

DOI: 10.1007/s00766-018-0306-1