| | |

Theory of Regulatory Compliance for Requirements Engineering

Ivan Jureta

Regulatory compliance is increasingly being addressed in the practice of requirements engineering as a main stream concern. This paper points out a gap in the theoretical foundations of regulatory compliance, and presents a theory that states (i) what it means for requirements to be compliant, (ii) the compliance problem, i.e., the problem that the engineer should resolve in order to verify whether requirements are compliant, and (iii) testable hypotheses (predictions) about how compliance of requirements is verified. The theory is instantiated by presenting a requirements engineering framework that implements its principles, and is exemplified on a real-world case study.

Theory-of-Regulatory-Compliance-for-Requirements-EngineeringDownload

Jureta, I., Siena, A., Mylopoulos, J., Perini, A. and Susi, A., 2010. Theory of regulatory compliance for requirements engineering. arXiv preprint arXiv:1002.3711.

Similar Posts

| | | |

Acceptability Condition for the Relative Validity of Requirements

ByIvan Jureta

A requirements engineering artifact is valid relative to the stakeholders of the system-to-be if they agree on the content of that artifact. Checking relative validity involves a discussion between the stakeholders and the requirements engineer. This paper proposes (i) a language for the representation of information exchanged in a discussion about the relative validity of…

| | |

Establishing Information System Compliance via Argumentation

ByIvan Jureta

This paper introduces a mixed modeling and argumentation framework applied to assess the compliance of requirements with legal norms, and reports the results of its application in an industrial project in healthcare. Domain experts applied a goal-oriented modeling framework for the representation of requirements and norms, then used argumentation techniques to assess the compliance of…

Does the EU AI Act apply to most software?
| | |

Does the EU AI Act apply to most software?

ByIvan Jureta

Does the EU AI Act apply to most, if not all software? It is probably not what was intended, but it may well be the case.  The EU AI Act, here, applies to “artificial intelligence systems” (AI system), and defines AI systems as follows: ‘artificial intelligence system’ (AI system) means software that is developed with…

| |

Normative Management of Web Service Level Agreements

ByIvan Jureta

Service Level Agreements (SLAs) are used in Service- Oriented Computing to define the obligations of the parties involved in a transaction. SLAs define these obligations, including for instance the expected service levels to be delivered by the provider, and the payment expected from the client. The obligations of the parties must be made explicit prior…

| | |

Context-Driven Autonomic Adaptation of Service Level Agreements

ByIvan Jureta

Service Level Agreements (SLAs) are used in Service-Oriented Computing to define the obligations of the parties involved in a transaction. SLAs define the service users’ Quality of Service (QoS) requirements that the service provider should satisfy. Requirements defined once may not be satisfiable when the context of the web services changes (e.g., when requirements or…

| |

An Exploratory Study of Topic Importance in Requirements Elicitation Interviews

ByIvan Jureta

Interviewing stakeholders is a common way to elicit information about requirements of the system-to-be and the conditions in its operating environment. One difficulty in preparing and doing interviews is how to avoid missing the information that may be important to understand the requirements and environment conditions. Some information may remain implicit throughout the interview, if…