A Mashup-based Framework for Business Process Compliance Checking





Publicado en

Actas de las XVIII Jornadas de Ciencia e Ingeniería de Servicios (JCIS 2023)

Licencia Creative Commons


Business process compliance ensures that the business processes of an organisation are designed and executed according to the rules that enforce the compliance controls that govern the company. We faced the challenge of building a Business Process Compliance Management System (BPCMS) for a process-aware organisation that had to provide support for several needs that, despite having been identified in the literature, were only partially satisfied by existing approaches. The variability in the types of rules and their interpretation generally restricts the existing support for compliance checking to specific types of rules (e.g., rules affecting the control flow of the process), a specific phase of the business process management lifecycle (e.g., design time or run time), or certain information systems for data retrieval (e.g., process event logs). Motivated by this, we designed a conceptual framework for design-time and run-time compliance checking that relies on the use of mashups for rule specification and checking. It presents the following advantages: (i) an open-ended set of types rules can be specified by designing and connecting mashup components; (ii) (parts of) the definitions of the rules can be reused as needed; and (iii) the mashup-based compliance checking system can be integrated with information systems of the organisation, enabling the verification of actual facts on actions performed during the execution of a process (e.g., the existence of a specific document in a concrete location). We defined a methodology to use the framework and we conducted design-time and run-time implementations that were validated with real data within a project with the IT department of a multinational company from the energy supply domain.


Acerca de Cabanillas, Cristina

Palabras clave

Business Process Compliance, Business Process Management, Compliance Checking, Compliance Framework, Mashups
Página completa del ítem
Notificar un error en este resumen
Mostrar cita
Mostrar cita en BibTeX
Descargar cita en BibTeX