[Context and motivation]: Understanding and interpreting regulatory norms and inferring software requirements from them is a critical step towards regulatory compliance, a matter of significant importance in various industrial sectors. [Question/ problem]: However, interpreting regulations still largely depends on individual legal expertise and experience within the respective domain, with little to no systematic methodologies and supportive tools to guide this practice. In fact, research in this area is too often detached from practitioners' experiences, rendering the proposed solutions not transferable to industrial practice. As we argue, one reason is that we still lack a profound understanding of industry- and domain-specific practices and challenges. [Principal ideas/ results]: We aim to close this gap and provide such an investigation at the example of the banking and insurance domain. We conduct an industrial multi-case study as part of a long-term academia-industry collaboration with a medium-sized software development and renovation company. We explore contemporary industrial practices and challenges when inferring requirements from regulations to support more problem-driven research. Our study investigates the complexities of requirement engineering in regulatory contexts, pinpointing various issues and discussing them in detail. We highlight the gathered insights and the practical challenges encountered and suggest avenues for future research. [Contribution]: Our contribution is a comprehensive case study focused on the FinTech domain, offering a detailed understanding of the specific needs within this sector. We have identified key practices for managing regulatory requirements in software development, and have pinpointed several challenges. We conclude by offering a set of recommendations for future problem-driven research directions.
翻译:[背景与动机]:理解与解读监管规范并从中推衍软件需求,是实现监管合规的关键步骤,这对多个工业领域具有重大意义。[问题/挑战]:然而,法规解读仍高度依赖领域内个体法律专业知识和经验,缺乏系统化方法论和辅助工具指导实践。事实上,该领域研究常脱离从业者实践经验,导致所提方案难以转移至工业实践。我们认为,原因之一是我们仍缺乏对行业与领域特定实践和挑战的深刻理解。[核心思想/成果]:我们旨在填补这一空白,以银行与保险领域为例展开系统调研。通过长期产学研合作,我们与一家中型软件开发与更新公司联合开展了工业多案例研究,探索当前从法规推衍需求的工业实践与挑战,以推动更多问题导向型研究。本研究揭示了监管背景下需求工程的复杂性,系统识别并详细讨论了多种问题。我们提炼了关键洞察与实践挑战,并提出了未来研究方向。[贡献]:我们贡献了一项聚焦金融科技领域的综合性案例研究,深入揭示了该领域的特殊需求。我们识别出软件开发中管理监管需求的关键实践,并明确了多项挑战。最终,我们为未来问题导向型研究方向提出了一系列建议。