A Classification Model for Automating Compliance

Various approaches to automate the observance of compliance requirements have recently been proposed. Since there is no all-round solution available within the foreseeable future, we propose a classification scheme for existing approaches that address different aspects of automating compliance. A layer model is used for linking laws and regulations with a company\´s IT system. The "policy layer" is seen as link between the non-technical compliance requirements and their implementation in the IT system. The achievable degree of automation essentially depends on the characteristics of the underlying policy language. Therefore, we derive and discuss criteria for a policy language in order to enable automation of compliance of business processes within the IT system.