Compliance Programs Have Real Value

Service Compliance: Towards Electronic Compliance Programs

“Compliance” is a multi-faceted concept that encompasses the capability of an organization to monitor and meet impinging obligations. It has recently become an area of significant concern to many major multi-national organizations. The proliferation of service-oriented systems rely on rich behavioral descriptions of functionality to facilitate seamless application composition and interoperation...

Verifying Compliance of Trusted Programs

In this paper, we present an approach for verifying that trusted programs correctly enforce system security goals when deployed. A trusted program is trusted to only perform safe operations despite have the authority to perform unsafe operations; for example, initialization programs, administrative programs, root network daemons, etc. Currently, these programs are trusted without concrete justi...

I Have Never Liked the Term “Compliance”

Institutional not-for-cause compliance review programs.

O ver the last few years, many academic institutions have begun to routinely audit ongoing research with human subjects to identify and mitigate risks to research participants, to ensure compliance with approved protocols, and to educate investigators about various matters related to protocol compliance and human research protections. These " not-for-cause " compliance reviews are an institutio...

The Relative Effectiveness of widely used Risk Controls and the Real Value of Compliance