1. www.ids-scheer.com Marwane El Kharbili, Sebastian Stein Semantic Enterprise Compliance Management

2. © IDS Scheer AG www.ids-scheer.com 2 Compliance Modeling for Enterprise Models Enterprise Model [ARIS] Problems: No FORMAL modeling of compliance No AUTOMATED compliance management support Organization Product & Service Data Function Business Process Modeling Compliance as Policies

3. © IDS Scheer AG www.ids-scheer.com 3 A Vision for Compliance Management Policy-Based Semantically formalized Loosely-Coupled:  Using decision services: Business Rules  Decision management architectures: Event-Driven Compliance Enforcement Currently:  Difficult to maintain  Regular audits necessary  Manual Work In IT-Supported solutions:  Hard-Coded  Specifically targeted  Low reusability  Low flexibility  Non-generic Vision:  Automated  Loosely Coupled  Generic  High reusability  High flexibility  Implementation- independant

4. © IDS Scheer AG www.ids-scheer.com 4 How to Implement Complex Decisions? View each policy as a complex decision Complex decisions as decision trees Nodes as decisions Decisions taken by business rules Decision triggering an action or another decision Research Question: How to declaratively implement decision propagartion and triggering? Solution: Use events as  policy and rule triggering mechanisms  Policy & rule meta-information carriers

5. © IDS Scheer AG www.ids-scheer.com 5 Decision Trees for Policy Enactment

6. © IDS Scheer AG www.ids-scheer.com 6 An Ontology for Decision Events Part of the business policy and rules ontology Designed for semantic compliance management in BPM Part of the SUPER research project on semantic BPM Main rationale: Policies make (compliance) decisions Rules contain context-dependent implementation logic for policies Policies generate policy events: activate (trigger) policies Rules generate rule events: execute (trigger) rules Policy are defined on subjects Subjects generate events: by changing their state/having their state changed Policies and rules subscribe to events

7. © IDS Scheer AG www.ids-scheer.com 7 A Core ontology for decision events

8. © IDS Scheer AG www.ids-scheer.com 8 Summary What: An approach for automating decision management part of a compliance management framework Why:  Model complex decisions  Automate decision-making  Flexible decision modeling: loose coupling of complex decisions and decision services (business rules) Contribution:  An ontology for decision event modeling integrated into an ontology for policies and rules. Future Work:  Showcase complex decision modeling for compliance in BPM through a use case  Extend complex event modeling abilities of the ontology: additional constructs  Grounding of semantic events into event streams/complex events processed by dedicated software

9. © IDS Scheer AG www.ids-scheer.com 9 Questions In case of detailed questions…