Processing regulations and resulting requirements to achieve regulatory compliance in software engineering (SE) is a developing challenge due to the continuously growing amount, complexity, and expanding scope of regulations. Despite the growing amount of newly suggested regulatory requirements engineering (RE) approaches by the research community, industry remains under pressure to assure their integration into their RE and overall software development life cycle (SDLC) practices to facilitate a seamless and legally valid compliance by design. As of today, we still have limited empirical understanding of how this can be achieved. Such integration should avoid additional burdens and address the demands of legal knowledge intensity, cross-functional communication and consistency between different involved viewpoints. Intermediary results of this doctoral study showed that regulatory RE has peculiarities distinguishing it from the engineering of other requirements. Oftentimes, organizations establish standalone regulatory RE processes on the organizational level. However, software development teams usually approach compliance by design in an ad-hoc manner, rather than in a systematic way. Among other, because of the complexity of the coordination between the involved viewpoints. The goal of this paper is to report and get feedback about the synthesis and future evaluation of our Artefact Model for Regulatory Requirements Engineering (AM4RRE) for a integrated compliance by design. We hope this paper will spark discussions about regulatory RE and help us refine plans for the final stage of the doctoral study.
翻译:在软件工程中,处理法规及衍生的需求以实现监管合规是一项日益严峻的挑战,这源于法规数量持续增长、复杂性加剧及适用范围不断扩大。尽管研究界提出了越来越多新的监管需求工程方法,但工业界仍面临压力,需要确保将这些方法整合到其需求工程及整体软件开发生命周期实践中,以实现无缝且法律上有效的“设计即合规”。迄今为止,我们对此如何实现仍缺乏充分的实证理解。这种整合应避免增加额外负担,并应对法律知识密集性、跨职能沟通以及不同相关视点间一致性的要求。本博士研究的阶段性成果表明,监管需求工程具有区别于其他需求工程的特性。组织层面通常建立独立的监管需求工程流程。然而,软件开发团队实现“设计即合规”的方式通常是临时性的,而非系统性的。其原因之一在于相关视点间协调的复杂性。本文旨在报告并获取关于我们为集成化“设计即合规”所提出的监管需求工程制品模型的综合与未来评估的反馈。我们希望本文能引发关于监管需求工程的讨论,并帮助我们完善博士研究最终阶段的计划。