Toward (Semi-) Automated End-to-End Model-driven Compliance Framework
نویسندگان
چکیده
For modern enterprises, compliance to regulations has become increasingly important. Yet, substantial manual interventions and lack of interoperable models of various compliance aspects contribute to an ineffective implementation and rising costs of compliance. We propose a (semi-) automated end-to-end compliance framework that has the potential to address these challenges. Our contributions are twofold. We first describe how reliance on domain experts and non-holistic treatment of compliance poses severe problems. We then propose a framework on top of our prior work to address the same. Ongoing explorations suggest that such a framework can better equip enterprises for efficient and effective compliance.
منابع مشابه
A Model-driven Regulatory Compliance Framework
Industry uses GRC frameworks for compliance management and tracking. These are document-oriented systems that help human experts maintain traceability between various artefacts in the compliance life-cycle. Documents such as legal text of regulations, compliance process descriptions, audit reports, etc. can be linked using tagging mechanisms. Actual implementation of compliance to regulations h...
متن کاملAURIC: A Scalable and Highly Reusable SLA Compliance Auditing Framework
Service Level Agreements (SLA) are needed to allow business interactions to rely on Internet services. Service Level Objectives (SLO) specify the committed performance level of a service. Thus, SLA compliance auditing aims at verifying these commitments. Since SLOs for various application services and end-to-end performance definitions vary largely, automated auditing of SLA compliances poses t...
متن کاملExamples of ecological data synthesis driven by rich metadata, and practical guidelines to use the Ecological Metadata Language specification to this end
We present two examples of scientific results using a semi-automated data synthesis driven by quality, rich-content metadata: 1) Antarctic climate and 2) effects of drought on biodiversity. We use a framework for semi-automated processing of data supported by quality controlled, content-rich metadata expressed in the Ecological Metadata Language (EML). We discuss a set of common practices for E...
متن کاملApplication of the rule extraction method to evaluate seismicity of Iran
Assessing seismic hazards involves specifying the likelihood, magnitude and location of earthquakes in a region. Predicting the seismic hazards is the first step in reducing the impact of the damage caused by an earthquake. In this study, to fully utilize all the known parameters which may possibly affect the occurrence of earthquakes (mb ≥ 4.5); a data-driven rule-extraction method called the...
متن کاملManagement of the Internet and Complex Services European Sixth Framework Network of Excellence FP 6 - 2004 - IST - 026854 - NoE Deliverable 8 . 3 Definition of a Draft Extended IP Network Management Model
Service Level Agreements (SLA) are needed to allow business interactions to rely onInternet services. Service Level Objectives (SLO) specify the committed performance levelof a service. Thus, SLA compliance auditing aims at verifying these commitments. SinceSLOs for various application services and end-to-end performance definitions vary largely,automated auditing of SLA com...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
عنوان ژورنال:
دوره شماره
صفحات -
تاریخ انتشار 2016