Towards A Formal Framework for Business Process Compliance

The advent of regulatory compliance requirements such as Sarbanes Oxley Act has forced enterprises to set up a process for managing an effective internal controls system on business processes. In this paper a formal framework consisting of a formal definition of business process compliance and a set of properties is proposed. A system implementing the formalization must satisfy the given properties. The advantage is that enterprises can verify whether their system responsible for achieving business process compliance itself is complaint in terms of checking whether its current state fulfills the given properties. The proposed model and its properties are motivated and exemplified using a scenario, showing the current challenges in achieving business process compliance at a use case company.