作者: Thorben Sandner , Michael H. Breitner , Matthias Kehlenbeck
DOI:
关键词: Credit rating 、 Computer security 、 Access control 、 Business Process Model and Notation 、 Business process 、 Business process management 、 IT risk management 、 XACML 、 Computer science 、 Process management 、 Control (management)
摘要: Compliance to regulatory demands has become a crucial matter for organizations. Nonobservance may lead far-reaching consequences, e.g. damage reputation, decline of credit rating or market value, fraud and fines. The success compliance management correlates with the frequency monitoring reporting is affected by complex often time-consuming manual validation tasks. To address this problem, organizations implement corresponding IT solutions. However, heterogeneous system landscapes, different information sources their integration represent major challenges. This paper presents an implementation novel process-oriented cross-system approach. approach based on model which provides annotation business processes internal controls, critical permissions roles as well architecture automatic detection, timely communication deep analysis control exceptions. It solely relies established standards (i.e. XACML, BPMN, COSO SWRL) existing technologies. been deployed in productive SAP ERP BI environment. automatically converts access data from proprietary publishes exceptions system. effects causes these exception can be appropriately analyzed using queries reports.