A risk - aware framework for compliance goal-obstacle analysis
Bendra Ojameruaye, Rami Bahsoon · 2015
Engineering regulatory compliance requirements is valuable during the software development process as they are necessary to reduce risk, improve security and help systems achieve their business goals. Existing methods for assessing compliance requirements are inadequate as they fail to consider the important aspects such as interdependency between goals, obstacles and agents. Poor goal and risk analysis during the requirement engineering phase often result in incomplete requirements and wrong estimation of risks. This paper presents a goal-oriented quantitative compliance analysis framework that considers these issues during the requirement analysis phase.