Integrating compliance requirements across business and IT

Ensuring compliance to laws and regulations in their business processes is a burdensome obligation for today's companies. Compliance requirements cover many areas of business and IT, including process design, deployment and run-time. Past approaches only covered some of these aspects. In this work we introduce a generic compliance descriptor, integrating different technical compliance implementations and keeping the link between laws, requirements and implementations, thus facilitating compliance in face of changes in laws, processes, and IT.