Conceptualizing a Responsibility based Approach for Elaborating and Verifying RBAC Policies Conforming with CobiT Framework Requirements

Christophe Feltus, Eric Dubois, Michaël Petit

Résultats de recherche: Contribution dans un livre/un catalogue/un rapport/dans les actes d'une conférenceArticle dans les actes d'une conférence/un colloque

161 Téléchargements (Pure)

Résumé

The objective of this paper is to present the first results toward the definition of a two steps approach for aligning business level requirements issued from corporate framework such as CobiT down to technical policies such as the access rights modeled by RBAC. To achieve that, our approach is based on the concept of employees' responsibility. Using this concept is motivated by the importance and the omnipresence of the responsibility all along the company frameworks, from the CEO responsibilities such as in the financial sector as defined by Sarbanes-Oxley Act down to the responsibility at the operation layer such as the one of a trader who must follow stock quotes for private banking. The approach is illustrated based on an example, which highlights how access rights are assigned to employees having responsibilities defined at the CobiT framework layer.
langue originaleAnglais
titreProceedings of the Third International Workshop on Requirements Engineering and Law (RELAW10), in conjunction with RE 2010, Sydney, Australia
EditeurIEEE
Pages34-43
Nombre de pages10
ISBN (imprimé)978-1-4244-8761-5
Les DOIs
Etat de la publicationPublié - 2010

Empreinte digitale

Examiner les sujets de recherche de « Conceptualizing a Responsibility based Approach for Elaborating and Verifying RBAC Policies Conforming with CobiT Framework Requirements ». Ensemble, ils forment une empreinte digitale unique.

Contient cette citation