{"id":"https://openalex.org/W7128912449","doi":"https://doi.org/10.1016/j.infsof.2026.108079","title":"Impact analysis of regulatory requirement changes on business process compliance","display_name":"Impact analysis of regulatory requirement changes on business process compliance","publication_year":2026,"publication_date":"2026-02-14","ids":{"openalex":"https://openalex.org/W7128912449","doi":"https://doi.org/10.1016/j.infsof.2026.108079"},"language":"en","primary_location":{"id":"doi:10.1016/j.infsof.2026.108079","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.infsof.2026.108079","pdf_url":null,"source":{"id":"https://openalex.org/S205010575","display_name":"Information and Software Technology","issn_l":"0950-5849","issn":["0950-5849","1873-6025"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information and Software Technology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.infsof.2026.108079","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5032251417","display_name":"Marisol Barrientos","orcid":"https://orcid.org/0000-0002-2500-7431"},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Marisol Barrientos","raw_affiliation_strings":["TUM School of Computation, Information and Technology, Technical University of Munich, Garching, Germany"],"raw_orcid":"https://orcid.org/0000-0002-2500-7431","affiliations":[{"raw_affiliation_string":"TUM School of Computation, Information and Technology, Technical University of Munich, Garching, Germany","institution_ids":["https://openalex.org/I62916508"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037195170","display_name":"Karolin Winter","orcid":"https://orcid.org/0009-0003-8030-2964"},"institutions":[{"id":"https://openalex.org/I83019370","display_name":"Eindhoven University of Technology","ror":"https://ror.org/02c2kyt77","country_code":"NL","type":"education","lineage":["https://openalex.org/I83019370"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Karolin Winter","raw_affiliation_strings":["Department of Industrial Engineering and Innovation Sciences, Eindhoven University of Technology, Eindhoven, The Netherlands"],"raw_orcid":"https://orcid.org/0009-0003-8030-2964","affiliations":[{"raw_affiliation_string":"Department of Industrial Engineering and Innovation Sciences, Eindhoven University of Technology, Eindhoven, The Netherlands","institution_ids":["https://openalex.org/I83019370"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5124700402","display_name":"Stefanie Rinderle-Ma","orcid":null},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Stefanie Rinderle-Ma","raw_affiliation_strings":["TUM School of Computation, Information and Technology, Technical University of Munich, Garching, Germany"],"raw_orcid":"https://orcid.org/0000-0001-5656-6108","affiliations":[{"raw_affiliation_string":"TUM School of Computation, Information and Technology, Technical University of Munich, Garching, Germany","institution_ids":["https://openalex.org/I62916508"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5032251417"],"corresponding_institution_ids":["https://openalex.org/I62916508"],"apc_list":{"value":3350,"currency":"USD","value_usd":3350},"apc_paid":{"value":3350,"currency":"USD","value_usd":3350},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.21206565,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"194","issue":null,"first_page":"108079","last_page":"108079"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.6909999847412109,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.6909999847412109,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.04430000111460686,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.02810000069439411,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/traceability","display_name":"Traceability","score":0.54339998960495},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5392000079154968},{"id":"https://openalex.org/keywords/conformity-assessment","display_name":"Conformity assessment","score":0.526199996471405},{"id":"https://openalex.org/keywords/business-process","display_name":"Business process","score":0.5217000246047974},{"id":"https://openalex.org/keywords/compliance","display_name":"Compliance (psychology)","score":0.5130000114440918},{"id":"https://openalex.org/keywords/business-requirements","display_name":"Business requirements","score":0.5116000175476074},{"id":"https://openalex.org/keywords/modular-design","display_name":"Modular design","score":0.4185999929904938},{"id":"https://openalex.org/keywords/business-process-modeling","display_name":"Business process modeling","score":0.3978999853134155},{"id":"https://openalex.org/keywords/requirements-engineering","display_name":"Requirements engineering","score":0.39570000767707825}],"concepts":[{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.5817999839782715},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5712000131607056},{"id":"https://openalex.org/C153876917","wikidata":"https://www.wikidata.org/wiki/Q899704","display_name":"Traceability","level":2,"score":0.54339998960495},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5392000079154968},{"id":"https://openalex.org/C5911748","wikidata":"https://www.wikidata.org/wiki/Q4072285","display_name":"Conformity assessment","level":2,"score":0.526199996471405},{"id":"https://openalex.org/C85345410","wikidata":"https://www.wikidata.org/wiki/Q851587","display_name":"Business process","level":3,"score":0.5217000246047974},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.5130000114440918},{"id":"https://openalex.org/C123247970","wikidata":"https://www.wikidata.org/wiki/Q5001932","display_name":"Business requirements","level":4,"score":0.5116000175476074},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.4632999897003174},{"id":"https://openalex.org/C101468663","wikidata":"https://www.wikidata.org/wiki/Q1620158","display_name":"Modular design","level":2,"score":0.4185999929904938},{"id":"https://openalex.org/C207505557","wikidata":"https://www.wikidata.org/wiki/Q4374012","display_name":"Business process modeling","level":4,"score":0.3978999853134155},{"id":"https://openalex.org/C6604083","wikidata":"https://www.wikidata.org/wiki/Q376937","display_name":"Requirements engineering","level":3,"score":0.39570000767707825},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.3801000118255615},{"id":"https://openalex.org/C173577280","wikidata":"https://www.wikidata.org/wiki/Q530038","display_name":"Requirements management","level":4,"score":0.3732999861240387},{"id":"https://openalex.org/C11066294","wikidata":"https://www.wikidata.org/wiki/Q1518244","display_name":"Business rule","level":4,"score":0.3612000048160553},{"id":"https://openalex.org/C6377922","wikidata":"https://www.wikidata.org/wiki/Q302542","display_name":"Deontic logic","level":2,"score":0.3384999930858612},{"id":"https://openalex.org/C174998907","wikidata":"https://www.wikidata.org/wiki/Q357662","display_name":"Work in process","level":2,"score":0.337799996137619},{"id":"https://openalex.org/C59488412","wikidata":"https://www.wikidata.org/wiki/Q187147","display_name":"Requirements analysis","level":3,"score":0.30809998512268066},{"id":"https://openalex.org/C76956256","wikidata":"https://www.wikidata.org/wiki/Q27610560","display_name":"Process modeling","level":3,"score":0.296099990606308},{"id":"https://openalex.org/C177688676","wikidata":"https://www.wikidata.org/wiki/Q7449106","display_name":"Semantics of Business Vocabulary and Business Rules","level":5,"score":0.27709999680519104},{"id":"https://openalex.org/C162754035","wikidata":"https://www.wikidata.org/wiki/Q17006331","display_name":"Artifact-centric business process model","level":5,"score":0.2700999975204468},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.26249998807907104},{"id":"https://openalex.org/C106201281","wikidata":"https://www.wikidata.org/wiki/Q336119","display_name":"Business operations","level":2,"score":0.2581999897956848},{"id":"https://openalex.org/C136886441","wikidata":"https://www.wikidata.org/wiki/Q926129","display_name":"Normalization (sociology)","level":2,"score":0.251800000667572}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1016/j.infsof.2026.108079","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.infsof.2026.108079","pdf_url":null,"source":{"id":"https://openalex.org/S205010575","display_name":"Information and Software Technology","issn_l":"0950-5849","issn":["0950-5849","1873-6025"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information and Software Technology","raw_type":"journal-article"},{"id":"pmh:oai:pure.tue.nl:openaire/62c8c550-3618-402a-9a69-ba150e9f62cf","is_oa":true,"landing_page_url":"https://research.tue.nl/en/publications/62c8c550-3618-402a-9a69-ba150e9f62cf","pdf_url":null,"source":{"id":"https://openalex.org/S4406922641","display_name":"TU/e Research Portal","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Barrientos, M, Winter, K & Rinderle-Ma, S 2026, 'Impact analysis of regulatory requirement changes on business process compliance', Information and Software Technology, vol. 194, 108079. https://doi.org/10.1016/j.infsof.2026.108079","raw_type":"info:eu-repo/semantics/publishedVersion"}],"best_oa_location":{"id":"doi:10.1016/j.infsof.2026.108079","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.infsof.2026.108079","pdf_url":null,"source":{"id":"https://openalex.org/S205010575","display_name":"Information and Software Technology","issn_l":"0950-5849","issn":["0950-5849","1873-6025"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information and Software Technology","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5238958597183228,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320320879","display_name":"Deutsche Forschungsgemeinschaft","ror":"https://ror.org/018mejw64"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W1552644025","https://openalex.org/W1605670742","https://openalex.org/W2109499854","https://openalex.org/W2130273205","https://openalex.org/W2131967717","https://openalex.org/W2755119590","https://openalex.org/W2785156082","https://openalex.org/W2929318940","https://openalex.org/W2996690535","https://openalex.org/W3017951264","https://openalex.org/W3112639413","https://openalex.org/W3117810684","https://openalex.org/W4212999972","https://openalex.org/W4318499495","https://openalex.org/W4362584032","https://openalex.org/W4386960768","https://openalex.org/W4401396184","https://openalex.org/W4401460791","https://openalex.org/W4401719912","https://openalex.org/W4401720461","https://openalex.org/W4402041265","https://openalex.org/W4414385441","https://openalex.org/W4415101856"],"related_works":[],"abstract_inverted_index":{"Ensuring":[0],"the":[1,79,105,146,158,192,239,252],"compliance":[2,27,88,97,163,172,205,211],"of":[3,9,81,115,123,160,164,181,204,238,259],"business":[4,86,277],"processes":[5,45],"with":[6,225,287],"a":[7,121,152,165,179],"set":[8],"requirements":[10,24,37,49,125,134],"stemming":[11],"from,":[12],"for":[13,20,76,109,171,199,236,254,270],"example,":[14],"laws":[15],"or":[16,42,60],"regulations,":[17],"is":[18,214,281],"crucial":[19],"companies.":[21],"When":[22],"these":[23],"change,":[25],"process":[26,87,166,278],"may":[28],"be":[29,195,285],"violated,":[30],"resulting":[31],"in":[32,58,136,202,223,243],"either":[33],"non-compliance,":[34],"where":[35,44],"updated":[36],"are":[38,176],"no":[39],"longer":[40],"satisfied,":[41],"over-compliance,":[43],"adhere":[46],"to":[47,131,209,246],"stricter":[48],"than":[50],"necessary.":[51],"In":[52],"both":[53],"cases,":[54],"this":[55,101],"can":[56,194,284],"result":[57],"financial":[59],"even":[61],"reputational":[62],"loss.":[63],"This":[64],"work":[65],"provides":[66,263],"an":[67,149],"automated":[68],"hybrid":[69],"approach":[70,113,269],"combining":[71],"LLM-based":[72,182],"and":[73,94,151,168,183,207,222,228,249,256,265,283],"algorithmic":[74,184],"steps":[75],"continuously":[77],"analyzing":[78,271],"impact":[80,159],"regulatory":[82,124,273],"requirement":[83,274],"changes":[84,161,275],"on":[85,96,127,162,216],"providing":[89],"traceability":[90],"through":[91],"delta":[92],"analysis":[93],"explanations":[95,170,189],"deviations.":[98,173],"To":[99],"address":[100],"objective,":[102],"we":[103,119,140,156],"present":[104],"modular":[106,264],"Requirements":[107],"Change":[108,186],"Process":[110],"Compliance":[111],"(RC4PC)":[112],"consisting":[114],"three":[116,217],"steps.":[117,185,240],"First,":[118],"provide":[120,169],"definition":[122],"based":[126],"deontic":[128],"logic":[129],"allowing":[130],"formally":[132],"represent":[133],"written":[135],"natural":[137],"language.":[138],"Second,":[139],"extract":[141],"atomic":[142],"change":[143],"operations":[144],"capturing":[145],"differences":[147],"between":[148],"original":[150],"modified":[153],"requirement.":[154],"Lastly,":[155],"assess":[157],"model":[167],"RC4PC":[174,213,262],"concepts":[175],"implemented":[177],"using":[178],"combination":[180],"deltas":[187],"plus":[188],"provided":[190],"by":[191],"LLM":[193],"taken":[196],"as":[197,291],"input":[198],"mitigation":[200],"actions":[201],"case":[203],"deviations":[206],"contribute":[208],"continuous":[210],"monitoring.":[212],"evaluated":[215],"datasets":[218],"from":[219],"different":[220],"domains":[221],"comparison":[224],"existing":[226,229,288],"baselines":[227],"approaches.":[230],"The":[231],"results":[232,235],"show":[233],"promising":[234],"each":[237],"Occasional":[241],"drops":[242],"precision,":[244],"due":[245],"inconsistent":[247],"representations":[248],"redundancy,":[250],"indicate":[251],"need":[253],"normalization":[255],"improved":[257],"handling":[258],"related":[260],"changes.":[261],"transparent":[266],"Gen-AI":[267],"supported":[268],"how":[272],"affect":[276],"compliance.":[279],"It":[280],"domain-independent":[282],"equipped":[286],"techniques":[289],"such":[290],"model-checking.":[292]},"counts_by_year":[],"updated_date":"2026-05-24T08:33:08.758527","created_date":"2026-02-15T00:00:00"}
