Integrating business strategies with requirement models of legal compliance

Authors:
  • SGSepideh Ghanavati
    Sepideh Ghanavati
  • DADaniel Amyot
    Daniel Amyot
  • LPLiam Peyton
    Liam Peyton
  • ASAlberto Siena
    Alberto Siena
  • APAnna Perini
    Anna Perini
  • ASAngelo Susi
    Angelo Susi

Abstract
Goal-oriented requirements engineering uses modelling to improve domain understanding and requirements quality. Regulations and laws impose additional context and constraints on goals and can limit the satisfaction of stakeholder needs. Organisations and software developers need modelling tools to assess the degree to which business strategies are effective in ensuring that business goals are met while complying with applicable laws and regulations. In this paper, we analyse the capabilities of the Goal-oriented Requirement Language (GRL) in supporting such assessments. Our analysis is based on four scenarios involving healthcare business processes and compliance with the Health Insurance Portability and Accountability Act.