Skip to main content
Erschienen in: Information Systems Frontiers 2/2016

01.04.2016

Business process compliance checking – applying and evaluating a generic pattern matching approach for conceptual models in the financial sector

verfasst von: Jörg Becker, Patrick Delfmann, Hanns-Alexander Dietrich, Matthias Steinhorst, Mathias Eggert

Erschienen in: Information Systems Frontiers | Ausgabe 2/2016

Einloggen

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config
loading …

Abstract

Given the strong increase in regulatory requirements for business processes the management of business process compliance becomes a more and more regarded field in IS research. Several methods have been developed to support compliance checking of conceptual models. However, their focus on distinct modeling languages and mostly linear (i.e., predecessor-successor related) compliance rules may hinder widespread adoption and application in practice. Furthermore, hardly any of them has been evaluated in a real-world setting. We address this issue by applying a generic pattern matching approach for conceptual models to business process compliance checking in the financial sector. It consists of a model query language, a search algorithm and a corresponding modelling tool prototype. It is (1) applicable for all graph-based conceptual modeling languages and (2) for different kinds of compliance rules. Furthermore, based on an applicability check, we (3) evaluate the approach in a financial industry project setting against its relevance for decision support of audit and compliance management tasks.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 390 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Maschinenbau + Werkstoffe




 

Jetzt Wissensvorsprung sichern!

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 340 Zeitschriften

aus folgenden Fachgebieten:

  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Versicherung + Risiko




Jetzt Wissensvorsprung sichern!

Anhänge
Nur mit Berechtigung zugänglich
Literatur
Zurück zum Zitat Abdullah, N. S., Indulska, M., & Shazia, S. (2009). A study of compliance management in information systems research. In Proc. of the European Conference on Information Systems (ECIS). Abdullah, N. S., Indulska, M., & Shazia, S. (2009). A study of compliance management in information systems research. In Proc. of the European Conference on Information Systems (ECIS).
Zurück zum Zitat Abdullah, N. S., Sadiq, S., & Indulska, M. (2010). Emerging Challenges in Information Systems Research for Regulatory Compliance Management. In B. Pernici (Ed.), Advanced Information Systems Engineering (Vol. 6051, pp. 251–265). Springer Berlin Heidelberg. doi:10.1007/978-3-642-13094-6_21 Abdullah, N. S., Sadiq, S., & Indulska, M. (2010). Emerging Challenges in Information Systems Research for Regulatory Compliance Management. In B. Pernici (Ed.), Advanced Information Systems Engineering (Vol. 6051, pp. 251–265). Springer Berlin Heidelberg. doi:10.​1007/​978-3-642-13094-6_​21
Zurück zum Zitat Accorsi, R., Lowis, L., & Sato, Y. (2011). Automated certification for compliant cloud-based business processes. Business and Information Systems Engineering, 3(3), 145–154. doi:10.1007/s12599-011-0155-7.CrossRef Accorsi, R., Lowis, L., & Sato, Y. (2011). Automated certification for compliant cloud-based business processes. Business and Information Systems Engineering, 3(3), 145–154. doi:10.​1007/​s12599-011-0155-7.CrossRef
Zurück zum Zitat Arbab, F., Kokash, N., & Meng, S. (2009). Towards Using Reo for Compliance-Aware Business Process Modeling. In T. Margaria & B. Steffen (Eds.), Leveraging Applications of Formal Methods, Verification and Validation (Vol. 17, pp. 108–123). Springer Berlin Heidelberg. doi:10.1007/978-3-540-88479-8_9 Arbab, F., Kokash, N., & Meng, S. (2009). Towards Using Reo for Compliance-Aware Business Process Modeling. In T. Margaria & B. Steffen (Eds.), Leveraging Applications of Formal Methods, Verification and Validation (Vol. 17, pp. 108–123). Springer Berlin Heidelberg. doi:10.​1007/​978-3-540-88479-8_​9
Zurück zum Zitat Awad, A. (2007). BPMN-Q: A Language to Query Business Processes (Enterprise Modelling and Information Systems Architectures Concepts and Applications Proceedings of the 2nd Int’l Workshop EMISA 2007 (Vol. 119, pp. 115–128)). Germany: St. Goar. Awad, A. (2007). BPMN-Q: A Language to Query Business Processes (Enterprise Modelling and Information Systems Architectures Concepts and Applications Proceedings of the 2nd Int’l Workshop EMISA 2007 (Vol. 119, pp. 115–128)). Germany: St. Goar.
Zurück zum Zitat Awad, A., Decker, G., & Weske, M. (2008). Efficient Compliance Checking Using BPMN-Q and Temporal Logic. In M. Dumas, M. Reichert, & M.-C. Shan (Eds.), Business Process Management (Vol. 5240, pp. 326–341). Milan: Springer Berlin Heidelberg. doi:10.1007/978-3-540-85758-7_24.CrossRef Awad, A., Decker, G., & Weske, M. (2008). Efficient Compliance Checking Using BPMN-Q and Temporal Logic. In M. Dumas, M. Reichert, & M.-C. Shan (Eds.), Business Process Management (Vol. 5240, pp. 326–341). Milan: Springer Berlin Heidelberg. doi:10.​1007/​978-3-540-85758-7_​24.CrossRef
Zurück zum Zitat Awad, A., & Sakr, S. (2010). Querying Graph-Based Repositories of Business Process Models. In M. Yoshikawa, X. Meng, T. Yumoto, Q. Ma, L. Sun, & C. Watanabe (Eds.), Database Systems for Advanced Applications (Vol. 6193, pp. 33–44). Tsukuba: Springer Berlin Heidelberg.CrossRef Awad, A., & Sakr, S. (2010). Querying Graph-Based Repositories of Business Process Models. In M. Yoshikawa, X. Meng, T. Yumoto, Q. Ma, L. Sun, & C. Watanabe (Eds.), Database Systems for Advanced Applications (Vol. 6193, pp. 33–44). Tsukuba: Springer Berlin Heidelberg.CrossRef
Zurück zum Zitat Awad, A., Smirnov, S., & Weske, M. (2009). Towards Resolving Compliance Violations in Business Process Models (In S. Sadiq, M. Indulska, M. zur Muehlen, E. Dubois, & P. Johannesson (Eds.), Proceedings of the 2nd International Workshop on Governance, Risk and Compliance (GRCIS’09)). Amsterdam: The Netherlands. Awad, A., Smirnov, S., & Weske, M. (2009). Towards Resolving Compliance Violations in Business Process Models (In S. Sadiq, M. Indulska, M. zur Muehlen, E. Dubois, & P. Johannesson (Eds.), Proceedings of the 2nd International Workshop on Governance, Risk and Compliance (GRCIS’09)). Amsterdam: The Netherlands.
Zurück zum Zitat Awad, A., & Weske, M. (2009). Visualization of compliance violation in business process models. In S. Rinderle-Ma, S. Sadiq, & F. Leymann (Eds.), Business Process Management Workshops (Vol. 43, pp. 182–193). Ulm: Springer Berlin Heidelberg. doi:10.1007/978-3-642-12186-9_17.CrossRef Awad, A., & Weske, M. (2009). Visualization of compliance violation in business process models. In S. Rinderle-Ma, S. Sadiq, & F. Leymann (Eds.), Business Process Management Workshops (Vol. 43, pp. 182–193). Ulm: Springer Berlin Heidelberg. doi:10.​1007/​978-3-642-12186-9_​17.CrossRef
Zurück zum Zitat Becker, J., Bergener, P., Delfmann, P., & Weiß, B. (2011). Modeling and Checking Business Process Compliance Rules in the Financial Sector. In D. F. Galletta & T.-P. Liang (Eds.), Proc. of the International Conference on Information Systems (ICIS). Becker, J., Bergener, P., Delfmann, P., & Weiß, B. (2011). Modeling and Checking Business Process Compliance Rules in the Financial Sector. In D. F. Galletta & T.-P. Liang (Eds.), Proc. of the International Conference on Information Systems (ICIS).
Zurück zum Zitat Becker, J., Breuker, D., Weiß, B., & Winkelmann, A. (2010). Exploring the Status Quo of Business Process Modelling Languages in the Banking Sector – An Empirical Insight into The Usage of Methods in Banks (In Proc. of the Australasian Conference on Information Systems (ACIS)). Australia: Brisbane. Becker, J., Breuker, D., Weiß, B., & Winkelmann, A. (2010). Exploring the Status Quo of Business Process Modelling Languages in the Banking Sector – An Empirical Insight into The Usage of Methods in Banks (In Proc. of the Australasian Conference on Information Systems (ACIS)). Australia: Brisbane.
Zurück zum Zitat Becker, J., Delfmann, P., Eggert, M., & Schwittay, S. (2012a). Generalizability and applicability of model-based business process compliance-checking approaches – A state-of-the-art analysis and research roadmap. Business Research, 5(2), 221–247.CrossRef Becker, J., Delfmann, P., Eggert, M., & Schwittay, S. (2012a). Generalizability and applicability of model-based business process compliance-checking approaches – A state-of-the-art analysis and research roadmap. Business Research, 5(2), 221–247.CrossRef
Zurück zum Zitat Becker, J., Delfmann, P., Herwig, S., & Lis, L. (2009). A Generic Set Theory-based Pattern Matching Approach for the Analysis of Conceptual Models. In A. H. F. Laender, S. Castano, U. Dayal, F. Casati, & J. P. M. de Oliverira (Eds.), Conceptual Modeling - ER 2009 (Vol. 5829, pp. 41–54). Berlin: Springer Verlag. doi:10.1007/978-3-642-04840-1_6.CrossRef Becker, J., Delfmann, P., Herwig, S., & Lis, L. (2009). A Generic Set Theory-based Pattern Matching Approach for the Analysis of Conceptual Models. In A. H. F. Laender, S. Castano, U. Dayal, F. Casati, & J. P. M. de Oliverira (Eds.), Conceptual Modeling - ER 2009 (Vol. 5829, pp. 41–54). Berlin: Springer Verlag. doi:10.​1007/​978-3-642-04840-1_​6.CrossRef
Zurück zum Zitat Becker, J., Eggert, M., & Schwittay, S. (2012). How to Evaluate the Practical Relevance of Business Process Compliance Checking Approaches? In D. C. Mattfeld & S. Robra-Bissantz (Eds.), Multikonferenz Wirtschaftsinformatik 2012 - Tagungsband der MKWI 2012 (pp. 849–861). Becker, J., Eggert, M., & Schwittay, S. (2012). How to Evaluate the Practical Relevance of Business Process Compliance Checking Approaches? In D. C. Mattfeld & S. Robra-Bissantz (Eds.), Multikonferenz Wirtschaftsinformatik 2012 - Tagungsband der MKWI 2012 (pp. 849–861).
Zurück zum Zitat Becker, A., Gruber, W., & Wohlert, D. (2006). Handbuch Marisk: Mindestanforderungen an Das Risiko-Management in Der Bankpraxis. Frankfurt: Knapp. Becker, A., Gruber, W., & Wohlert, D. (2006). Handbuch Marisk: Mindestanforderungen an Das Risiko-Management in Der Bankpraxis. Frankfurt: Knapp.
Zurück zum Zitat Becker, J., & Schütte, R. (2004). Handelsinformationssysteme. Frankfurt: Redline Wirtschaft. Becker, J., & Schütte, R. (2004). Handelsinformationssysteme. Frankfurt: Redline Wirtschaft.
Zurück zum Zitat Boella, G., Janssen, M., Hulstijn, J., Humphreys, L., & van der Torre, L. (2013). Managing legal interpretation in regulatory compliance. In Proceedings of the Fourteenth International Conference on Artificial Intelligence and Law - ICAIL’13 (pp. 23–32). New York: ACM Press. doi:10.1145/2514601.2514605.CrossRef Boella, G., Janssen, M., Hulstijn, J., Humphreys, L., & van der Torre, L. (2013). Managing legal interpretation in regulatory compliance. In Proceedings of the Fourteenth International Conference on Artificial Intelligence and Law - ICAIL’13 (pp. 23–32). New York: ACM Press. doi:10.​1145/​2514601.​2514605.CrossRef
Zurück zum Zitat Bräuer, S., Delfmann, P., Dietrich, H.-A., & Steinhorst, M. (2013). Using a Generic Model Query Approach to Allow for Process Model Compliance Checking–An Algorithmic Perspective. In R. Alt & B. Franczyk (Eds.), Proceedings of the 11th International Conference on Wirtschaftsinformatik (WI) 2013 (pp. 1245–1259). Leipzig: Universität Leipzig. Bräuer, S., Delfmann, P., Dietrich, H.-A., & Steinhorst, M. (2013). Using a Generic Model Query Approach to Allow for Process Model Compliance Checking–An Algorithmic Perspective. In R. Alt & B. Franczyk (Eds.), Proceedings of the 11th International Conference on Wirtschaftsinformatik (WI) 2013 (pp. 1245–1259). Leipzig: Universität Leipzig.
Zurück zum Zitat Buhl, H. U., Fridgen, G., Müller, G., & Röglinger, M. (2012). Business and information systems engineering : A complementary approach to information systems – what we can learn from the past and may conclude from present reflection on the future. Journal of the Association for Information Systems, 13, 236–253. Buhl, H. U., Fridgen, G., Müller, G., & Röglinger, M. (2012). Business and information systems engineering : A complementary approach to information systems – what we can learn from the past and may conclude from present reflection on the future. Journal of the Association for Information Systems, 13, 236–253.
Zurück zum Zitat Cabanillas, C., Resinas, M., & Ruiz-Cortés, A. (2010). Hints on how to face business process compliance. Ac-tas de los Talleres de las Jornadas de Ingeniería del Software y Bases de Datos, 4(4), 26–32. Cabanillas, C., Resinas, M., & Ruiz-Cortés, A. (2010). Hints on how to face business process compliance. Ac-tas de los Talleres de las Jornadas de Ingeniería del Software y Bases de Datos, 4(4), 26–32.
Zurück zum Zitat Caldwell, F. (2009). The Worldwide Economic Crisis Will Bring Real-Time Reporting for Risk Management. Stamford: Gartner Research, Gartner, Inc. Caldwell, F. (2009). The Worldwide Economic Crisis Will Bring Real-Time Reporting for Risk Management. Stamford: Gartner Research, Gartner, Inc.
Zurück zum Zitat Caldwell, F., Bace, J., & Lotto, R. (2009). U.S. Financial System Regulatory Overhaul Brings More Scrutiny. Stamford: Gartner Research, Gartner, Inc. Caldwell, F., Bace, J., & Lotto, R. (2009). U.S. Financial System Regulatory Overhaul Brings More Scrutiny. Stamford: Gartner Research, Gartner, Inc.
Zurück zum Zitat Davis, A. M. (1993). Software Requirements: Objects, Functions, and States. Upper Saddle River: Prentice-Hall, Inc. Davis, A. M. (1993). Software Requirements: Objects, Functions, and States. Upper Saddle River: Prentice-Hall, Inc.
Zurück zum Zitat Delfmann, P., Herwig, S., & Lis, Ł. (2009). Unified Enterprise Knowledge Representation with Conceptual Models - Capturing Corporate Language in Naming Conventions (Proc. of the International Conference on Information Systems (ICIS)). Arizona: Phoenix. Delfmann, P., Herwig, S., & Lis, Ł. (2009). Unified Enterprise Knowledge Representation with Conceptual Models - Capturing Corporate Language in Naming Conventions (Proc. of the International Conference on Information Systems (ICIS)). Arizona: Phoenix.
Zurück zum Zitat Delfmann, P., Steinhorst, M., Dietrich, H.-A., & Becker, J. (2014). The generic model query language GMQL - conceptual specification, implementation, and runtime evaluation. Information Systems. doi:10.1016/j.is.2014.06.003. Delfmann, P., Steinhorst, M., Dietrich, H.-A., & Becker, J. (2014). The generic model query language GMQL - conceptual specification, implementation, and runtime evaluation. Information Systems. doi:10.​1016/​j.​is.​2014.​06.​003.
Zurück zum Zitat Diestel, R. (2010). Graph Theory. Springer. Diestel, R. (2010). Graph Theory. Springer.
Zurück zum Zitat Dietrich, H.-A., Breuker, D., Steinhorst, M., Delfmann, P., & Becker, J. (2013). Developing graphical model editors for meta-modelling tools – requirements, conceptualisation, and implementation. Enterprise Modelling and Information Systems Architectures, 8(2), 42–78.CrossRef Dietrich, H.-A., Breuker, D., Steinhorst, M., Delfmann, P., & Becker, J. (2013). Developing graphical model editors for meta-modelling tools – requirements, conceptualisation, and implementation. Enterprise Modelling and Information Systems Architectures, 8(2), 42–78.CrossRef
Zurück zum Zitat Dietrich, H.-A., Steinhorst, M., Becker, J., & Delfmann, P. (2011). Fast Pattern Matching in Conceptual Models - Evaluating and Extending a Generic Approach. In M. Nüttgens, O. Thomas, & B. Weber (Eds.), Enterprise Modelling and Information Systems Architectures (EMISA 2011) (Vol. 190, pp. 79–92). GI. Dietrich, H.-A., Steinhorst, M., Becker, J., & Delfmann, P. (2011). Fast Pattern Matching in Conceptual Models - Evaluating and Extending a Generic Approach. In M. Nüttgens, O. Thomas, & B. Weber (Eds.), Enterprise Modelling and Information Systems Architectures (EMISA 2011) (Vol. 190, pp. 79–92). GI.
Zurück zum Zitat El Kharbili, M., de Medeiros, A. K. A., Stein, S., & van der Aalst, W. M. P. (2008). Business Process Compliance Checking: Current State and Future Challenges. In P. Loos, M. Nüttgens, K. Turowsk, & D. Werth (Eds.), MobIS 2008 (Vol. 141, pp. 107–113). Saarbrücken, Germany: GI. El Kharbili, M., de Medeiros, A. K. A., Stein, S., & van der Aalst, W. M. P. (2008). Business Process Compliance Checking: Current State and Future Challenges. In P. Loos, M. Nüttgens, K. Turowsk, & D. Werth (Eds.), MobIS 2008 (Vol. 141, pp. 107–113). Saarbrücken, Germany: GI.
Zurück zum Zitat Elgammal, A., Türetken, O., van den Heuvel, W.-J., & Papazoglou, M. P. (2010). Root-Cause Analysis of Design-Time Compliance Violations on the Basis of Property Patterns. In P. P. Maglio, M. Weske, J. Yang, & M. Fantinato (Eds.), ICSOC (Vol. 6470, pp. 17–31). Elgammal, A., Türetken, O., van den Heuvel, W.-J., & Papazoglou, M. P. (2010). Root-Cause Analysis of Design-Time Compliance Violations on the Basis of Property Patterns. In P. P. Maglio, M. Weske, J. Yang, & M. Fantinato (Eds.), ICSOC (Vol. 6470, pp. 17–31).
Zurück zum Zitat Foerster, A., Engels, G., Schattkowsky, T., Van Der Straeten, R., & Forster, A. (2007). Verification of Business Process Quality Constraints Based on Visual Process Patterns. In First Joint IEEE/IFIP Symposium on Theoretical Aspects of Software Engineering (TASE’07) (pp. 197–208). Washington: IEEE. doi:10.1109/TASE.2007.56.CrossRef Foerster, A., Engels, G., Schattkowsky, T., Van Der Straeten, R., & Forster, A. (2007). Verification of Business Process Quality Constraints Based on Visual Process Patterns. In First Joint IEEE/IFIP Symposium on Theoretical Aspects of Software Engineering (TASE’07) (pp. 197–208). Washington: IEEE. doi:10.​1109/​TASE.​2007.​56.CrossRef
Zurück zum Zitat Foerster, A., Engels, G., & Schattkowsky, T. (2005). Activity Diagram Patterns for Modeling Quality Constraints in Business Processes. In L. Briand & C. Williams (Eds.), Model Driven Engineering Languages and Systems (Vol. 3713, pp. 2–16). Springer Berlin Heidelberg. doi:10.1007/11557432_2 Foerster, A., Engels, G., & Schattkowsky, T. (2005). Activity Diagram Patterns for Modeling Quality Constraints in Business Processes. In L. Briand & C. Williams (Eds.), Model Driven Engineering Languages and Systems (Vol. 3713, pp. 2–16). Springer Berlin Heidelberg. doi:10.​1007/​11557432_​2
Zurück zum Zitat Gamma, E., Helm, R., Johnson, R., & Vlissides, J. (1994). Design Patterns: Elements of Reusable Object-Oriented Software. Amsterdam: Addison-Wesley Professional. Gamma, E., Helm, R., Johnson, R., & Vlissides, J. (1994). Design Patterns: Elements of Reusable Object-Oriented Software. Amsterdam: Addison-Wesley Professional.
Zurück zum Zitat Ghose, A., & Koliadis, G. (2007). Auditing Business Process Compliance. In B. Krämer, K.-J. Lin, & P. Narasimhan (Eds.), Service-Oriented Computing – ICSOC 2007 (Vol. 4749, pp. 169–180). Vienna: Springer Berlin Heidelberg. doi:10.1007/978-3-540-74974-5.CrossRef Ghose, A., & Koliadis, G. (2007). Auditing Business Process Compliance. In B. Krämer, K.-J. Lin, & P. Narasimhan (Eds.), Service-Oriented Computing – ICSOC 2007 (Vol. 4749, pp. 169–180). Vienna: Springer Berlin Heidelberg. doi:10.​1007/​978-3-540-74974-5.CrossRef
Zurück zum Zitat Goedertier, S., & Vanthienen, J. (2006). Designing Compliant Business Processes with Obligations and Permissions. In J. Eder & S. Dustdar (Eds.), Business Process Management Workshops (Vol. 4103, pp. 5–14). Vienna: Springer Berlin Heidelberg. doi:10.1007/11837862_2.CrossRef Goedertier, S., & Vanthienen, J. (2006). Designing Compliant Business Processes with Obligations and Permissions. In J. Eder & S. Dustdar (Eds.), Business Process Management Workshops (Vol. 4103, pp. 5–14). Vienna: Springer Berlin Heidelberg. doi:10.​1007/​11837862_​2.CrossRef
Zurück zum Zitat Governatori, G., Milosevic, Z., & Sadiq, S. (2006). Compliance Checking Between Business Processes and Business Contracts. In Proceedings of the 10th IEEE International Enterprise Distributed Object Computing Conference (pp. 221–232). Washington: IEEE Computer Society. doi:10.1109/EDOC.2006.22. Governatori, G., Milosevic, Z., & Sadiq, S. (2006). Compliance Checking Between Business Processes and Business Contracts. In Proceedings of the 10th IEEE International Enterprise Distributed Object Computing Conference (pp. 221–232). Washington: IEEE Computer Society. doi:10.​1109/​EDOC.​2006.​22.
Zurück zum Zitat Governatori, G., & Rotolo, A. (2010). A Conceptually Rich Model of Business Process Compliance. In Proceedings of the Seventh Asia-Pacific Conference on Conceptual Modelling (pp. 3–12). Darlinghurst: Australian Computer Society, Inc. Governatori, G., & Rotolo, A. (2010). A Conceptually Rich Model of Business Process Compliance. In Proceedings of the Seventh Asia-Pacific Conference on Conceptual Modelling (pp. 3–12). Darlinghurst: Australian Computer Society, Inc.
Zurück zum Zitat Hevner, A. R., March, S. T., Park, J., & Ram, S. (2004). Design science in information systems research. MIS Quarterly, 28(1), 75–105. Hevner, A. R., March, S. T., Park, J., & Ram, S. (2004). Design science in information systems research. MIS Quarterly, 28(1), 75–105.
Zurück zum Zitat Höfferer, P. (2007). Achieving business process model interoperability using metamodels and ontologies. In H. Österle, J. Schelp, & R. Winter (Eds.), Proc. of the European Conference on Information Systems (ECIS) (pp. 1620–1631). St. Gallen, Switzerland: University of St. Gallen. Höfferer, P. (2007). Achieving business process model interoperability using metamodels and ontologies. In H. Österle, J. Schelp, & R. Winter (Eds.), Proc. of the European Conference on Information Systems (ECIS) (pp. 1620–1631). St. Gallen, Switzerland: University of St. Gallen.
Zurück zum Zitat Hoffmann, J., Weber, I., & Governatori, G. (2009). On compliance checking for clausal constraints in annotated process models. Information Systems Frontiers, 14(2), 155–177. doi:10.1007/s10796-009-9179-7.CrossRef Hoffmann, J., Weber, I., & Governatori, G. (2009). On compliance checking for clausal constraints in annotated process models. Information Systems Frontiers, 14(2), 155–177. doi:10.​1007/​s10796-009-9179-7.CrossRef
Zurück zum Zitat Knuplesch, D., Ly, L. T., Rinderle-Ma, S., Pfeifer, H., & Dadam, P. (2010). On Enabling Data-Aware Compliance Checking of Business Process Models. In Conceptual Modeling – ER 2010 (Vol. 6412, pp. 332–346). Vancouver: Springer Berlin Heidelberg. doi:10.1007/978-3-642-16373-9_24. Knuplesch, D., Ly, L. T., Rinderle-Ma, S., Pfeifer, H., & Dadam, P. (2010). On Enabling Data-Aware Compliance Checking of Business Process Models. In Conceptual Modeling – ER 2010 (Vol. 6412, pp. 332–346). Vancouver: Springer Berlin Heidelberg. doi:10.​1007/​978-3-642-16373-9_​24.
Zurück zum Zitat Kokash, N., & Arbab, F. (2009). Formal Behavioral Modeling and Compliance Analysis for Service-Oriented Systems. In F. S. Boer, M. M. Bonsangue, & E. Madelaine (Eds.), Formal Methods for Components and Objects (Vol. 5751, pp. 21–41). Sophia Antipolis: Springer Berlin Heidelberg. doi:10.1007/978-3-642-04167-9_2.CrossRef Kokash, N., & Arbab, F. (2009). Formal Behavioral Modeling and Compliance Analysis for Service-Oriented Systems. In F. S. Boer, M. M. Bonsangue, & E. Madelaine (Eds.), Formal Methods for Components and Objects (Vol. 5751, pp. 21–41). Sophia Antipolis: Springer Berlin Heidelberg. doi:10.​1007/​978-3-642-04167-9_​2.CrossRef
Zurück zum Zitat Kotonya, G., & Sommerville, I. (1998). Requirements Engineering - Processes and Techniques. John Wiley & Sons. Kotonya, G., & Sommerville, I. (1998). Requirements Engineering - Processes and Techniques. John Wiley & Sons.
Zurück zum Zitat Kumar, A., & Liu, R. (2008). A Rule-Based Framework Using Role Patterns for Business Process Compliance. In N. Bassiliades, G. Governatori, & A. Paschke (Eds.), Rule Representation, Interchange and Reasoning on the Web (Vol. 5321, pp. 58–72). Springer Berlin Heidelberg. doi:10.1007/978-3-540-88808-6_9 Kumar, A., & Liu, R. (2008). A Rule-Based Framework Using Role Patterns for Business Process Compliance. In N. Bassiliades, G. Governatori, & A. Paschke (Eds.), Rule Representation, Interchange and Reasoning on the Web (Vol. 5321, pp. 58–72). Springer Berlin Heidelberg. doi:10.​1007/​978-3-540-88808-6_​9
Zurück zum Zitat Küster, J. M., Ryndina, K., & Gall, H. (2007). Generation of Business Process Models for Object Life Cycle Compliance. In G. Alonso, P. Dadam, & M. Rosemann (Eds.), Business Process Management (Vol. 4714, pp. 165–181). Brisbane: Springer Berlin Heidelberg. doi:10.1007/978-3-540-75183-0_13.CrossRef Küster, J. M., Ryndina, K., & Gall, H. (2007). Generation of Business Process Models for Object Life Cycle Compliance. In G. Alonso, P. Dadam, & M. Rosemann (Eds.), Business Process Management (Vol. 4714, pp. 165–181). Brisbane: Springer Berlin Heidelberg. doi:10.​1007/​978-3-540-75183-0_​13.CrossRef
Zurück zum Zitat Lu, R., Sadiq, S., & Governatori, G. (2008b). Compliance Aware Business Process Design. In A. ter Hofstede, B. Benatallah, & H.-Y. Paik (Eds.), Business Process Management Workshops (Vol. 4928, pp. 120–131). Brisbane: Springer Berlin Heidelberg. doi:10.1007/978-3-540-78238-4_14.CrossRef Lu, R., Sadiq, S., & Governatori, G. (2008b). Compliance Aware Business Process Design. In A. ter Hofstede, B. Benatallah, & H.-Y. Paik (Eds.), Business Process Management Workshops (Vol. 4928, pp. 120–131). Brisbane: Springer Berlin Heidelberg. doi:10.​1007/​978-3-540-78238-4_​14.CrossRef
Zurück zum Zitat Ly, L. T., Göser, K., Rinderle-Ma, S., & Dadam, P. (2008a). Compliance of Semantic Constraints - A Requirements Analysis for Process Management Systems. In Proc. 1st Int’l Workshop on Governance, Risk and Compliance - Applications in Information Systems (GRCIS’08). Ly, L. T., Göser, K., Rinderle-Ma, S., & Dadam, P. (2008a). Compliance of Semantic Constraints - A Requirements Analysis for Process Management Systems. In Proc. 1st Int’l Workshop on Governance, Risk and Compliance - Applications in Information Systems (GRCIS’08).
Zurück zum Zitat Ly, L. T., Rinderle, S., & Dadam, P. (2008b). Integration and verification of semantic constraints in adaptive process management systems. Data and Knowledge Engineering, 64(1), 3–23. doi:10.1016/j.datak.2007.06.007. Ly, L. T., Rinderle, S., & Dadam, P. (2008b). Integration and verification of semantic constraints in adaptive process management systems. Data and Knowledge Engineering, 64(1), 3–23. doi:10.​1016/​j.​datak.​2007.​06.​007.
Zurück zum Zitat Ly, L. T., Rinderle, S., & Dadam, P. (2006). Semantic Correctness in Adaptive Process Management Systems. In S. Dustdar, J. L. Fiadeiro, & A. P. Sheth (Eds.), Business Process Management (Vol. 4102, pp. 193–208). Vienna: Springer Berlin Heidelberg. doi:10.1007/11841760_14. Ly, L. T., Rinderle, S., & Dadam, P. (2006). Semantic Correctness in Adaptive Process Management Systems. In S. Dustdar, J. L. Fiadeiro, & A. P. Sheth (Eds.), Business Process Management (Vol. 4102, pp. 193–208). Vienna: Springer Berlin Heidelberg. doi:10.​1007/​11841760_​14.
Zurück zum Zitat Ly, L. T., Rinderle-Ma, S., Göser, K., & Dadam, P. (2012). On enabling integrated process compliance with semantic constraints in process management systems. Information Systems Frontiers, 14(2), 195–219. doi:10.1007/s10796-009-9185-9.CrossRef Ly, L. T., Rinderle-Ma, S., Göser, K., & Dadam, P. (2012). On enabling integrated process compliance with semantic constraints in process management systems. Information Systems Frontiers, 14(2), 195–219. doi:10.​1007/​s10796-009-9185-9.CrossRef
Zurück zum Zitat Ly, L. T., Rinderle-Ma, S., & Dadam, P. (2010). Design and Verification of Instantiable Compliance Rule Graphs in Process-Aware Information Systems. In B. Pernici (Ed.), Advanced Information Systems Engineering (Vol. 6051, pp. 9–23). Hammamet: Springer Berlin Heidelberg. doi:10.1007/978-3-642-13094-6_3.CrossRef Ly, L. T., Rinderle-Ma, S., & Dadam, P. (2010). Design and Verification of Instantiable Compliance Rule Graphs in Process-Aware Information Systems. In B. Pernici (Ed.), Advanced Information Systems Engineering (Vol. 6051, pp. 9–23). Hammamet: Springer Berlin Heidelberg. doi:10.​1007/​978-3-642-13094-6_​3.CrossRef
Zurück zum Zitat Mendling, J. (2007). Detection and Prediction of Errors in EPC Business Process Models (Doctoral dissertation). WU Vienna University of Economics and Business Administration. Mendling, J. (2007). Detection and Prediction of Errors in EPC Business Process Models (Doctoral dissertation). WU Vienna University of Economics and Business Administration.
Zurück zum Zitat Monakova, G., Kopp, O., Leymann, F., Moser, S., & Schäfers, K. (2009). Verifying Business Rules Using an SMT Solver for BPEL Processes. In W. Abramowicz, L. Maciaszek, R. Kowalczyk, & A. Speck (Eds.), Business process, servicescomputing and intelligent service management (Vol. 147, pp. 81–94). Gesellschaft für Informatik e.V. (GI). Monakova, G., Kopp, O., Leymann, F., Moser, S., & Schäfers, K. (2009). Verifying Business Rules Using an SMT Solver for BPEL Processes. In W. Abramowicz, L. Maciaszek, R. Kowalczyk, & A. Speck (Eds.), Business process, servicescomputing and intelligent service management (Vol. 147, pp. 81–94). Gesellschaft für Informatik e.V. (GI).
Zurück zum Zitat Müller, J. (2010). Strukturbasierte Verifikation von BPMN-Modellen (Doctoral dissertation). Eberhard-Karls-Universität Tübingen. Müller, J. (2010). Strukturbasierte Verifikation von BPMN-Modellen (Doctoral dissertation). Eberhard-Karls-Universität Tübingen.
Zurück zum Zitat Peffers, K., Tuunanen, T., Rothenberger, M. A., & Chatterjee, S. (2007). A design science research methodology for information systems research. Journal of Management Information System, 24(3), 45–77. doi:10.2753/MIS0742-1222240302.CrossRef Peffers, K., Tuunanen, T., Rothenberger, M. A., & Chatterjee, S. (2007). A design science research methodology for information systems research. Journal of Management Information System, 24(3), 45–77. doi:10.​2753/​MIS0742-1222240302.CrossRef
Zurück zum Zitat Raduescu, C., Tan, H. M., Jayaganesh, M., Bandara, W., zur Muehlen, M., & Lippe, S. (2006). A framework of issues in large process modeling projects. In Proc. of the European Conference on Information Systems (ECIS). Göteborg, Sweden. Raduescu, C., Tan, H. M., Jayaganesh, M., Bandara, W., zur Muehlen, M., & Lippe, S. (2006). A framework of issues in large process modeling projects. In Proc. of the European Conference on Information Systems (ECIS). Göteborg, Sweden.
Zurück zum Zitat Rinderle-Ma, S., Ly, L. T., & Dadam, P. (2008). Business process compliance. EMISA Forum, 28(2), 24–29. Rinderle-Ma, S., Ly, L. T., & Dadam, P. (2008). Business process compliance. EMISA Forum, 28(2), 24–29.
Zurück zum Zitat Rosemann, M., & Vessey, I. (2008). Toward improving the relevance of information systems research to practice: The role of applicability checks. MIS Quarterly, 32(1), 1–22. Rosemann, M., & Vessey, I. (2008). Toward improving the relevance of information systems research to practice: The role of applicability checks. MIS Quarterly, 32(1), 1–22.
Zurück zum Zitat Sadiq, S., Governatori, G., & Namiri, K. (2007). Modeling Control Objectives for Business Process Compliance. In G. Alonso, P. Dadam, & M. Rosemann (Eds.), Business Process Management (Vol. 4714, pp. 149–164). Springer Berlin Heidelberg. doi:10.1007/978-3-540-75183-0_12 Sadiq, S., Governatori, G., & Namiri, K. (2007). Modeling Control Objectives for Business Process Compliance. In G. Alonso, P. Dadam, & M. Rosemann (Eds.), Business Process Management (Vol. 4714, pp. 149–164). Springer Berlin Heidelberg. doi:10.​1007/​978-3-540-75183-0_​12
Zurück zum Zitat Scheer, A.-W. (2000). ARIS - Business Process Modeling (3rd ed.). Berlin: Springer.CrossRef Scheer, A.-W. (2000). ARIS - Business Process Modeling (3rd ed.). Berlin: Springer.CrossRef
Zurück zum Zitat Schleicher, D., Anstett, T., Leymann, F., & Schumm, D. (2010). Compliant Business Process Design Using Refinement Layers. In R. Meersman, T. Dillon, & P. Herrero (Eds.), On the Move to Meaningful Internet Systems: OTM 2010 (Vol. 6426, pp. 114–131). Springer Berlin Heidelberg. doi:10.1007/978-3-642-16934-2_11 Schleicher, D., Anstett, T., Leymann, F., & Schumm, D. (2010). Compliant Business Process Design Using Refinement Layers. In R. Meersman, T. Dillon, & P. Herrero (Eds.), On the Move to Meaningful Internet Systems: OTM 2010 (Vol. 6426, pp. 114–131). Springer Berlin Heidelberg. doi:10.​1007/​978-3-642-16934-2_​11
Zurück zum Zitat Schumm, D., Turetken, O., Kokash, N., Elgammal, A., Leymann, F., & Van Den Heuvel, W.-J. (2010). Business Process Compliance Through Reusable Units of Compliant Processes. In F. Daniel & F. M. Facca (Eds.), Current Trends in Web Engineering (Vol. 6385, pp. 325–337). Berlin: Springer Berlin Heidelberg.CrossRef Schumm, D., Turetken, O., Kokash, N., Elgammal, A., Leymann, F., & Van Den Heuvel, W.-J. (2010). Business Process Compliance Through Reusable Units of Compliant Processes. In F. Daniel & F. M. Facca (Eds.), Current Trends in Web Engineering (Vol. 6385, pp. 325–337). Berlin: Springer Berlin Heidelberg.CrossRef
Zurück zum Zitat Simon, H. A. (1996). The Sciences of the Artificial (3rd ed.). Cambridge: MIT Press. Simon, H. A. (1996). The Sciences of the Artificial (3rd ed.). Cambridge: MIT Press.
Zurück zum Zitat Stewart, D. W., Shamdasani, P. N., & Rook, D. W. (2007). Focus groups: Theory and practice (2nd ed.). Sage Publications, Inc. Stewart, D. W., Shamdasani, P. N., & Rook, D. W. (2007). Focus groups: Theory and practice (2nd ed.). Sage Publications, Inc.
Zurück zum Zitat Thomas, O., & Fellmann, M. (2009). Semantic process modeling – design and implementation of an ontology-based representation of business processes. Business and Information Systems Engineering, 1(6), 438–451. doi:10.1007/s12599-009-0078-8.CrossRef Thomas, O., & Fellmann, M. (2009). Semantic process modeling – design and implementation of an ontology-based representation of business processes. Business and Information Systems Engineering, 1(6), 438–451. doi:10.​1007/​s12599-009-0078-8.CrossRef
Zurück zum Zitat Tosatto, S. C., Governatori, G., Kelsen, P., & van der Torre, L. (2012). Business Process Compliance is Hard (pp. 1–14). Tosatto, S. C., Governatori, G., Kelsen, P., & van der Torre, L. (2012). Business Process Compliance is Hard (pp. 1–14).
Zurück zum Zitat Tosatto, S. C., Kharbili, M. El, Governatori, G., Kelsen, P., Ma, Q., & van der Torre, L. (2013). Algorithms for Basic Compliance Problems. In IEEE Sixth International Conference on Software Testing, Verification and Validation Workshops (pp. 2–7). IEEE. doi:10.1109/ICSTW.2013.6 Tosatto, S. C., Kharbili, M. El, Governatori, G., Kelsen, P., Ma, Q., & van der Torre, L. (2013). Algorithms for Basic Compliance Problems. In IEEE Sixth International Conference on Software Testing, Verification and Validation Workshops (pp. 2–7). IEEE. doi:10.​1109/​ICSTW.​2013.​6
Zurück zum Zitat Weiß, B., & Winkelmann, A. (2011). A Metamodel Based Perspective on the Adaptation of a Semantic Business Process Modeling Language to the Financial Sector. In 2011 44th Hawaii International Conference on System Sciences (pp. 1–10). IEEE. doi:10.1109/HICSS.2011.16 Weiß, B., & Winkelmann, A. (2011). A Metamodel Based Perspective on the Adaptation of a Semantic Business Process Modeling Language to the Financial Sector. In 2011 44th Hawaii International Conference on System Sciences (pp. 1–10). IEEE. doi:10.​1109/​HICSS.​2011.​16
Zurück zum Zitat Wolter, C., Miseldine, P., & Meinel, C. (2009). Verification of Business Process Entailment Constraints Using SPIN. In F. Massacci, S. Redwine Jr., & N. Zannone (Eds.), Engineering Secure Software and Systems (Vol. 5429, pp. 1–15). Springer Berlin Heidelberg. doi:10.1007/978-3-642-00199-4_1 Wolter, C., Miseldine, P., & Meinel, C. (2009). Verification of Business Process Entailment Constraints Using SPIN. In F. Massacci, S. Redwine Jr., & N. Zannone (Eds.), Engineering Secure Software and Systems (Vol. 5429, pp. 1–15). Springer Berlin Heidelberg. doi:10.​1007/​978-3-642-00199-4_​1
Zurück zum Zitat Worzberger, R., Kurpick, T., & Heer, T. (2008a). Checking Correctness and Compliance of Integrated Process Models. In Symbolic and Numeric Algorithms for Scientific Computing, 2008. SYNASC’08. 10th International Symposium on (pp. 576–583). doi:10.1109/SYNASC.2008.10 Worzberger, R., Kurpick, T., & Heer, T. (2008a). Checking Correctness and Compliance of Integrated Process Models. In Symbolic and Numeric Algorithms for Scientific Computing, 2008. SYNASC’08. 10th International Symposium on (pp. 576–583). doi:10.​1109/​SYNASC.​2008.​10
Zurück zum Zitat Worzberger, R., Kurpick, T., & Heer, T. (2008b). On Correctness, Compliance and Consistency of Process Models. In Workshop on Enabling Technologies: Infrastructure for Collaborative Enterprises, 2008. WETICE’08. IEEE 17th (pp. 251–252). doi:10.1109/WETICE.2008.9 Worzberger, R., Kurpick, T., & Heer, T. (2008b). On Correctness, Compliance and Consistency of Process Models. In Workshop on Enabling Technologies: Infrastructure for Collaborative Enterprises, 2008. WETICE’08. IEEE 17th (pp. 251–252). doi:10.​1109/​WETICE.​2008.​9
Zurück zum Zitat Zoet, M., Welke, R., Versendaal, J., & Ravesteyn, P. (2009). Aligning Risk Management and Compliance Considerations with Business Process Development. In T. Noia & F. Buccafurri (Eds.), E-Commerce and Web Technologies (Vol. 5692, pp. 157–168). Springer Berlin Heidelberg. doi:10.1007/978-3-642-03964-5_16 Zoet, M., Welke, R., Versendaal, J., & Ravesteyn, P. (2009). Aligning Risk Management and Compliance Considerations with Business Process Development. In T. Noia & F. Buccafurri (Eds.), E-Commerce and Web Technologies (Vol. 5692, pp. 157–168). Springer Berlin Heidelberg. doi:10.​1007/​978-3-642-03964-5_​16
Metadaten
Titel
Business process compliance checking – applying and evaluating a generic pattern matching approach for conceptual models in the financial sector
verfasst von
Jörg Becker
Patrick Delfmann
Hanns-Alexander Dietrich
Matthias Steinhorst
Mathias Eggert
Publikationsdatum
01.04.2016
Verlag
Springer US
Erschienen in
Information Systems Frontiers / Ausgabe 2/2016
Print ISSN: 1387-3326
Elektronische ISSN: 1572-9419
DOI
https://doi.org/10.1007/s10796-014-9529-y

Weitere Artikel der Ausgabe 2/2016

Information Systems Frontiers 2/2016 Zur Ausgabe