Automated Certification for Compliant Cloud-based Business Processes

A key problem in the deployment oflarge-scale, reliable cloud computingconcerns the difficulty to certify thecompliance of business processes operatingin the cloud. Standard auditprocedures such as SAS-70 and SAS-117 are hard to conduct for cloudbasedprocesses. The paper proposesa novel approach to certify the complianceof business processes with regulatoryrequirements. The approach translatesprocess models into their correspondingPetri net representationsand checks them against requirementsalso expressed in this formalism. Beingbased on Petri nets, the approach provideswell-founded evidence on adherenceand, in case of noncompliance, indicatesthe possible vulnerabilities