We present a model-based approach to extract governance requirements from the law and enterprise regulations, to formal specifications. This is the first step of an end-to-end implemented methodology for validating legal compliance of enterprises to law through logic models. Our UML-based Governance Extraction Model (GEM) is able to extract many legal and enterprise requirements, particularly business process and access-control requirements. Examples from Canadian and USA financial and privacy laws are provided. As a result of our extraction process, logic analyzers were shown to be able to detect compliance faults.
No takes yet. Share an insight, caveat, or question.
Hassan et al. (2009) studied this question.
Synapse has enriched 2 closely related papers on similar clinical questions. Consider them for comparative context: