Using Goal-Oriented Requirements Engineering for Improving the Quality of ISO/IEC 15504 based Compliance Assessment Frameworks

Authors:
Andre Rifaut;Eric Dubois
Affiliations:
-;-
Venue:
RE '08 Proceedings of the 2008 16th IEEE International Requirements Engineering Conference
Year:
2008

Citing 0
Cited 10

Managing the Alignment between Business and Software Services Requirements from a Capability Model Perspective

ServiceWave '08 Proceedings of the 1st European Conference on Towards a Service-Based Internet
Social Modeling and i*

Conceptual Modeling: Foundations and Applications
Designing Law-Compliant Software Requirements

ER '09 Proceedings of the 28th International Conference on Conceptual Modeling
A Meta-Model for Modelling Law-Compliant Requirements

RELAW '09 Proceedings of the 2009 Second International Workshop on Requirements Engineering and Law
Establishing regulatory compliance for information system requirements: an experience report from the health care domain

ER'10 Proceedings of the 29th international conference on Conceptual modeling
Establishing regulatory compliance for software requirements

ER'11 Proceedings of the 30th international conference on Conceptual modeling
Requirements, intentions, goals and applicable norms

ER'12 Proceedings of the 2012 international conference on Advances in Conceptual Modeling
Capturing variability of law with nómos 2

ER'12 Proceedings of the 31st international conference on Conceptual Modeling
Choosing compliance solutions through stakeholder preferences

REFSQ'13 Proceedings of the 19th international conference on Requirements Engineering: Foundation for Software Quality
Arguing regulatory compliance of software requirements

Data & Knowledge Engineering

Quantified Score

Hi-index	0.00

Visualization

Abstract

Within the context of business processes design and deployment we introduce and illustrate the use of goal models for capturing compliance requirements applicable over business processes configurations. More specifically we explain how a goal-oriented approach can be used together with the ISO/IEC 15504 standard in order to provide a formal framework according to which the compliance of business processes against regulations and their associated requirements can be assessed and measured. The overall approach is discussed and illustrated through the handling of a real business case related to the Basel II Accords on operational risk management in the financial sector.