Modeling and Reconfiguration of critical Business Processes for the purpose of a Business Continuity Management respecting Security Risk and Compliance requirements at Credit Suisse using Algebraic Graph Transformation: Extended Version

Brandt, Christoph; Hermann, Frank; Groote, Jan-Friso

Reference : Modeling and Reconfiguration of critical Business Processes for the purpose of a Busi...


	Document type :	Reports : External report
	Discipline(s) :	Engineering, computing & technology : Computer science
	To cite this reference:	http://hdl.handle.net/10993/5624

Title :	Modeling and Reconfiguration of critical Business Processes for the purpose of a Business Continuity Management respecting Security Risk and Compliance requirements at Credit Suisse using Algebraic Graph Transformation: Extended Version
Language :	English
Author, co-author :	Brandt, Christoph [> >]
	Hermann, Frank [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > >]
	Groote, Jan-Friso [> >]
Publication date :	2010
Publisher :	TU Berlin, Fak. IV
ISBN :	ISSN 1436-9915
Report number :	2010/11
Abstract :	[en] Critical business processes can fail. A Business Continuity Management System is a special management system that will de ne how to recover from such failures and speci es temporary work-arounds to make sure a company is not going out of business in the worst case. However, because today's implementations are primarily organizational best-practice solutions, their security, risk and compliance issues in such a recovery situation are mostly unknown. Algebraic graph theory can be used as a formal method supporting employees when running business processes need to be recon gured to recover from speci c failures. The example discussed is a loan granting process in a real-world banking environment. Because such a process has to respect certain laws, regulations and rules even in emergency situations, we sketch how this can be done during the process recon guration by looking at security, risk and compliance issues, compatible with the graph technique. Furthermore, we show how the analysis can be extended to requirements concerning the information ow using the process algebra mCRL2.
Permalink :	http://hdl.handle.net/10993/5624
Other URL :	http://www.eecs.tu-berlin.de/menue/forschung/forschungsberichte/2010

File(s) associated to this reference

Fulltext file(s):

	File	Commentary	Version	Size	Access
Private access	tr_2010-11.pdf		Publisher postprint	4.29 MB	Request a copy

All documents in ORBi^lu are protected by a user license.

University of Luxembourg Library | Feedback | Legal notices