Comparative Analysis between Document-based and Model-based Compliance Management Approaches

Authors:
Sepideh Ghanavati;Daniel Amyot;Liam Peyton
Affiliations:
-;-;-
Venue:
RELAW '08 Proceedings of the 2008 Requirements Engineering and Law
Year:
2008

Citing 4
Cited 1

Towards Regulatory Compliance: Extracting Rights and Obligations to Align Requirements with Regulations

RE '06 Proceedings of the 14th IEEE International Requirements Engineering Conference
Analyzing Regulatory Rules for Privacy and Security Requirements

IEEE Transactions on Software Engineering
Toward an Integrated User Requirements Notation Framework and Tool forBusiness Process Management

MCETECH '08 Proceedings of the 2008 International MCETECH Conference on e-Technologies
Towards a framework for tracking legal compliance in healthcare

CAiSE'07 Proceedings of the 19th international conference on Advanced information systems engineering

Compliance evaluation featuring heat maps (CE-HM): a meta-modeling-based approach

CAiSE'12 Proceedings of the 24th international conference on Advanced Information Systems Engineering

Quantified Score

Hi-index	0.00

Visualization

Abstract

Compliance of an organization's business processes with legislation is difficult to assess, and even more so as laws and processes evolve. Using seven criteria, we evaluate five different approaches for documenting and managing such compliance that involve models and/or legal documents, with or without tool support for traceability. It is argued that a mixed approach that combines models and original documents, with tool support, offers the best trade-off. We also discuss an example of such an approach based on the User Requirements Notation and a commercial require- ments management system.