A static compliance-checking framework for business process models
IBM Systems Journal
A Design Science Research Methodology for Information Systems Research
Journal of Management Information Systems
Verification of Business Process Entailment Constraints Using SPIN
ESSoS '09 Proceedings of the 1st International Symposium on Engineering Secure Software and Systems
COBIT and Application Controls: A Management Guide
COBIT and Application Controls: A Management Guide
Design and natural science research on information technology
Decision Support Systems
HICSS '10 Proceedings of the 2010 43rd Hawaii International Conference on System Sciences
Pattern-based design and validation of business process compliance
OTM'07 Proceedings of the 2007 OTM Confederated international conference on On the move to meaningful internet systems: CoopIS, DOA, ODBASE, GADA, and IS - Volume Part I
Fuzzy mining: adaptive process simplification based on multi-perspective metrics
BPM'07 Proceedings of the 5th international conference on Business process management
Conceptual model for online auditing
Decision Support Systems
Business process compliance through reusable units of compliant processes
ICWE'10 Proceedings of the 10th international conference on Current trends in web engineering
On enabling data-aware compliance checking of business process models
ER'10 Proceedings of the 29th international conference on Conceptual modeling
Design science in information systems research
MIS Quarterly
On enabling integrated process compliance with semantic constraints in process management systems
Information Systems Frontiers
Design science research evaluation
DESRIST'12 Proceedings of the 7th international conference on Design Science Research in Information Systems: advances in theory and practice
A comprehensive framework for evaluation in design science research
DESRIST'12 Proceedings of the 7th international conference on Design Science Research in Information Systems: advances in theory and practice
Context-Aware compliance checking
BPM'12 Proceedings of the 10th international conference on Business Process Management
Where did i misbehave? diagnostic information in compliance checking
BPM'12 Proceedings of the 10th international conference on Business Process Management
| Hi-index | 0.00 |
In enterprise resource planning (ERP) environments the audit of business process compliance is a complex task as audit relevant context information about the ERP system like application controls (ACs) need to be considered to derive comprehensive audit results. Current compliance checking approaches neglect such information as it is not readily available in process models. Even if ACs are automatically analysed with audit software, the results still need to be linked to related processes. By now, this linking is not methodically supported. To address this gap this paper presents a method to automatically enrich process models with audit relevant information about ACs. The method consists of three phases: process model construction, automated analysis of ACs, and model enrichment. It utilizes two existing artefacts and combines them to provide a comprehensive basis for compliance checking. Moreover, the enriched process models can support auditors in conducting process audits in ERP environments.