Article in Proceedings INPROC-2010-92

BibliographyBirukou, Aliaksandr; D'Andrea, Vincenzo; Leymann, Frank; Serafinski, Jacek; Silveira, Patrícia; Strauch, Steve; Tluczek, Marek: An Integrated Solution for Runtime Compliance Governance in SOA.
In: Proceedings of the 8th International Conference on Service-Oriented Computing (ICSOC'10), San Francisco, California, USA, December 7-10, 2010.
University of Stuttgart, Faculty of Computer Science, Electrical Engineering, and Information Technology.
pp. 122-136, english.
Springer, December 7, 2010.
DOI: 10.1007/978-3-642-17358-5_9.
Article in Proceedings (Conference Paper).
Corporation8th International Conference on Service-Oriented Computing
CR-SchemaH.4.1 (Office Automation)
KeywordsCompliance Governance, Business Process, Monitoring, SOA, Complex Event Processing
Abstract

In response to recent nancial scandals (e.g. those involving Enron, Fortis, Parmalat), new regulations for protecting the society from nancial and operational risks of the companies have been introduced. Therefore, companies are required to assure compliance of their operations with those new regulations as well as those already in place. Regulations are only one example of compliance sources modern organizations deal with every day. Other sources of compliance include licenses of business partners and other contracts, internal policies, and international standards. The diversity of compliance sources introduces the problem of compliance governance in an organization. In this paper, we propose an integrated solution for runtime compliance governance in Service-Oriented Architectures (SOAs). We show how the proposed solution supports the whole cycle of compliance management: from modeling compliance requirements in domain-speci c languages through monitoring them during process execution to displaying information about the current state of compliance in dashboards. We focus on the runtime part of the proposed solution and describe it in detail.We apply the developed framework in a real case study coming from EU FP7 project COMPAS, and this case study is used through the paper to illustrate our solution.

ContactPlease send an e-mail to steve.strauch@iaas.uni-stuttgart.de
Department(s)University of Stuttgart, Institute of Architecture of Application Systems
Project(s)COMPAS
Entry dateSeptember 29, 2010
   Publ. Computer Science