Context: As the diversity and complexity of regulations affecting Software-Intensive Products and Services (SIPS) is increasing, software engineers need to address the growing regulatory scrutiny. As with any other non-negotiable requirements, SIPS compliance should be addressed early in SIPS engineering - i.e., during requirements engineering (RE). Objectives: In the conditions of the expanding regulatory landscape, existing research offers scattered insights into regulatory compliance of SIPS. This study addresses the pressing need for a structured overview of the state of the art in software RE and its contribution to regulatory compliance of SIPS. Method: We conducted a systematic mapping study to provide an overview of the current state of research regarding challenges, principles and practices for regulatory compliance of SIPS related to RE. We focused on the role of RE and its contribution to other SIPS lifecycle phases. We retrieved 6914 studies published from 2017 until 2023 from four academic databases, which we filtered down to 280 relevant primary studies. Results: We identified and categorized the RE-related challenges in regulatory compliance of SIPS and their potential connection to six types of principles and practices. We found that about 13.6% of the primary studies considered the involvement of both software engineers and legal experts. About 20.7% of primary studies considered RE in connection to other process areas. Most primary studies focused on a few popular regulation fields and application domains. Our results suggest that there can be differences in terms of challenges and involvement of stakeholders across different fields of regulation. Conclusion: Our findings highlight the need for an in-depth investigation of stakeholders' roles, relationships between process areas, and specific challenges for distinct regulatory fields to guide research and practice.
翻译:背景:随着影响软件密集型产品与服务(SIPS)的法规多样性和复杂性日益增加,软件工程师需要应对日益严格的监管审查。与任何其他不可协商的需求类似,SIPS合规性应在SIPS工程早期——即需求工程(RE)阶段——予以解决。目标:在不断扩展的监管环境下,现有研究对SIPS监管合规性提供了零散的见解。本研究旨在对软件需求工程研究现状及其对SIPS监管合规性的贡献进行结构化综述,以应对这一迫切需求。方法:我们通过系统映射研究,对当前关于SIPS监管合规性在需求工程相关挑战、原则与实践的研究现状进行了全面梳理。研究重点关注需求工程的作用及其对其他SIPS生命周期阶段的贡献。我们从四个学术数据库中检索了2017年至2023年间发表的6914项研究,经筛选最终确定280项相关核心研究。结果:我们识别并分类了SIPS监管合规性中与需求工程相关的挑战,及其与六类原则和实践的潜在关联。研究发现约13.6%的核心研究同时考虑了软件工程师和法律专家的参与,约20.7%的核心研究将需求工程与其他流程领域相关联。大多数核心研究集中于少数热门监管领域和应用范畴。结果表明,不同监管领域在挑战和利益相关方参与方面可能存在差异。结论:我们的研究结果强调,需要深入探究利益相关方角色、流程领域间关系以及特定监管领域的具体挑战,以指导未来研究与实践。