TY - GEN
T1 - Satisfaction of control objectives by control processes
AU - Marino, D.
AU - Massacci, F.
AU - Micheletti, A.
AU - Rassadko, N.
AU - Neuhaus, S.
PY - 2009
Y1 - 2009
N2 - Showing that business processes comply with regulatory requirements is not easy. We investigate this compliance problem in the case that the requirements are expressed as a directed, acyclic graph, with high-level requirements (called control objectives) at the top and with low-level requirements (called control activities) at the bottom. These control activities are then implemented by control processes. We introduce two algorithms: the first identifies whether a given set of control activities is sufficient to satisfy the top-level control objectives; the second identifies those steps of control processes that contribute to the satisfaction of top-level control objectives. We illustrate these concepts and the algorithms by examples taken from a large healthcare provider. © 2009 Springer-Verlag Berlin Heidelberg.
AB - Showing that business processes comply with regulatory requirements is not easy. We investigate this compliance problem in the case that the requirements are expressed as a directed, acyclic graph, with high-level requirements (called control objectives) at the top and with low-level requirements (called control activities) at the bottom. These control activities are then implemented by control processes. We introduce two algorithms: the first identifies whether a given set of control activities is sufficient to satisfy the top-level control objectives; the second identifies those steps of control processes that contribute to the satisfaction of top-level control objectives. We illustrate these concepts and the algorithms by examples taken from a large healthcare provider. © 2009 Springer-Verlag Berlin Heidelberg.
UR - https://www.scopus.com/pages/publications/75649115361
UR - https://www.scopus.com/inward/citedby.url?scp=75649115361&partnerID=8YFLogxK
U2 - 10.1007/978-3-642-10383-4_39
DO - 10.1007/978-3-642-10383-4_39
M3 - Conference contribution
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 531
EP - 545
BT - Service-Oriented Computing - 7th International Joint Conference, ICSOC-Service Wave 2009, Proceedings
T2 - 7th International Joint Conference on Service-Oriented Computing, ICSOC-ServiceWave 2009
Y2 - 24 November 2009 through 27 November 2009
ER -