Segmentation-based modeling for advanced targeted marketing
Proceedings of the seventh ACM SIGKDD international conference on Knowledge discovery and data mining
Improving Business Process Quality through Exception Understanding, Prediction, and Prevention
Proceedings of the 27th International Conference on Very Large Data Bases
Discovering workflow models from activities' lifespans
Computers in Industry - Special issue: Process/workflow mining
Computers in Industry - Special issue: Process/workflow mining
Discovering Expressive Process Models by Clustering Log Traces
IEEE Transactions on Knowledge and Data Engineering
VLDB '02 Proceedings of the 28th international conference on Very Large Data Bases
Conformance checking of processes based on monitoring real behavior
Information Systems
A generic solution for warehousing business process data
VLDB '07 Proceedings of the 33rd international conference on Very large data bases
Deriving Protocol Models from Imperfect Service Conversation Logs
IEEE Transactions on Knowledge and Data Engineering
A Management Framework for WS-BPEL
ECOWS '08 Proceedings of the 2008 Sixth European Conference on Web Services
Decision Trees for Uncertain Data
ICDE '09 Proceedings of the 2009 IEEE International Conference on Data Engineering
Business Compliance Governance in Service-Oriented Architectures
AINA '09 Proceedings of the 2009 International Conference on Advanced Information Networking and Applications
Maintaining Compliance in Customizable Process Models
OTM '09 Proceedings of the Confederated International Conferences, CoopIS, DOA, IS, and ODBASE 2009 on On the Move to Meaningful Internet Systems: Part I
Modeling organizational performance indicators
Information Systems
Modeling control objectives for business process compliance
BPM'07 Proceedings of the 5th international conference on Business process management
Toward Uncertain Business Intelligence: The Case of Key Indicators
IEEE Internet Computing
Message Correlation and Web Service Protocol Mining from Inaccurate Logs
ICWS '10 Proceedings of the 2010 IEEE International Conference on Web Services
On the design of compliance governance dashboards for effective compliance and audit management
ICSOC/ServiceWave'09 Proceedings of the 2009 international conference on Service-oriented computing
Designing compliant business processes with obligations and permissions
BPM'06 Proceedings of the 2006 international conference on Business Process Management Workshops
Conformance testing: measuring the fit and appropriateness of event logs and process models
BPM'05 Proceedings of the Third international conference on Business Process Management
On compliance checking for clausal constraints in annotated process models
Information Systems Frontiers
| Hi-index | 0.00 |
Facilitating compliance management, that is, assisting a company's management in conforming to laws, regulations, standards, contracts, and policies, is a hot but non-trivial task. The service-oriented architecture (SOA) has evolved traditional, manual business practices into modern, service-based IT practices that ease part of the problem: the systematic definition and execution of business processes. This, in turn, facilitates the online monitoring of system behaviors and the enforcement of allowed behaviors--all ingredients that can be used to assist compliance management on the fly during process execution. In this paper, instead of focusing on monitoring and runtime enforcement of rules or constraints, we strive for an alternative approach to compliance management in SOAs that aims at assessing and improving compliance. We propose two ingredients: (i) a model and tool to design compliant service-based processes and to instrument them in order to generate evidence of how they are executed and (ii) a reporting and analysis suite to create awareness of a company's compliance state and to enable understanding why and where compliance violations have occurred. Together, these ingredients result in an approach that is close to how the real stakeholders--compliance experts and auditors--actually assess the state of compliance in practice and that is less intrusive than enforcing compliance.