A Systematic Method for Extracting and Analyzing Cloud-Based Compliance Requirements

Business organizations are enforced with requirements presented by regulatory bodies or standards which must be complied with and followed maximally. Failure or in instances slight deviations from these requirements had cost a number of firms and affected their reputations. These could be traced to inefficient techniques employed in analyzing these requirements. This paper presents an efficient pre-analysis and analysis procedure that employs both goal based engineering and cerno-framework approach in acquiring, extracting and classifying requirements as well as presenting algorithms that will diligently take care of previous analysis lapses. The work was applied to the health domain utilizing the Health Insurance Protection and Accountability Act (HIPAA). This was used placing in mind that such industry is fast adopting cloud services with the consideration of the security constraints that are essential in such domain. This approach will aid a full compliance consideration in the management of business or software processes aiding analysts in preventing incomplete adherence to regulatory guidelines or policies and enhancing correctness.