[论文解读] An Approach For A Business-Driven Cloud-Compliance Analysis Covering Public Sector Process Improvement Requirements

Sachar Paulus, Ute Riemann|arXiv (Cornell University)|Oct 8, 2013

Risk Management in Financial Firms参考文献 2被引用 7

一句话总结

本文提出了一种以业务为导向的公共部门云合规性分析框架，以企业价值链为核心，评估云适用性与合规性。通过映射流程至其价值创造角色，并考虑公共部门特有的约束条件，该方法能够有针对性地识别具备云迁移潜力的流程，从而通过战略性云采用提升流程优化与价值创造能力。

ABSTRACT

The need for process improvement is an important target that does affect as well the government processes. Specifically in the public sector there are specific challenges to face .New technology approaches within government processes such as cloud services are necessary to address these challenges. Following the current discussion of „cloudification“of business processes all processes are considered similar in regards to their usability within the cloud. The truth is, that neither all processes have the same usability for cloud services not do they have the same importance for a specific company. The most comprehensive process within a company is the corporate value chain. In this article one key proposition is to use the corporate value chain as the fundamental structuring backbone for all business process analysis and improvement activities. It is a pre-requisite to identify the core elements of the value chain that are essential for the individual company’s business and the root cause for any company success. In this paper we propose to use the company-specific value-creation for the “cloud-affinity” and the “cloud-usability” of a business process in public sector considering the specific challenges of addressing processes in cloud services. Therefor it is necessary to formalize the way the processes with its interdependencies are documented in context of their company-specific value chain (as part of the various deployment- and governance alternatives (e.g. security, compliance, quality, adaptability)). Moreover, it is essential in the public sector to describe in detail the environmental / external restrictions of processes.. With the use of this proposed methodology it becomes relatively easy to identify cloud-suitable processes within the public sector and thus optimize the public companies value generation tightly focused with the use of this new technology.

研究动机与目标

• 解决公共部门业务流程在云适用性评估方面不一致的问题。
• 将合规性与流程改进需求整合到统一的公共组织云采用框架中。
• 确立企业价值链作为分析业务流程云亲和力与可用性的结构性基础。
• 形式化公共部门云部署中的流程依赖关系与外部约束条件。
• 通过战略性云服务集成，实现对公共部门价值创造的针对性优化。

提出的方法

• 以企业价值链为核心分析框架，识别关键业务流程及其价值创造角色。
• 基于流程在价值链中的位置与功能，对每个流程实施云亲和力与云可用性评估。
• 在企业特定的价值链与治理模型背景下，正式记录流程之间的依赖关系。
• 系统性地描述并整合公共部门特有的外部与环境限制条件至合规性分析中。
• 通过将流程特性与云服务模型及合规要求对齐，支持多种部署方案。
• 基于战略价值与合规准备度，实现对流程云迁移的优先级排序。

实验结果

研究问题

• RQ1 如何在确保合规的前提下，系统性地评估公共部门业务流程的云适用性？
• RQ2 企业价值链在识别对公共部门价值创造至关重要的核心流程中发挥何种作用？
• RQ3 如何在云合规性分析中正式建模流程依赖关系与外部约束？
• RQ4 基于价值链的分析在多大程度上提升了云采用与公共部门流程改进目标的一致性？
• RQ5 在公共管理中，如何使云合规性分析更具业务导向而非技术导向？

主要发现

• 价值链为识别对公共部门成功与云准备度至关重要的核心流程提供了稳健基础。
• 具有更高价值创造角色的流程表现出更强的云亲和力，因而被优先考虑迁移与优化。
• 对依赖关系与外部约束的正式记录，增强了公共云部署中的合规性与治理能力。
• 该方法支持一种有针对性的、以业务为导向的云采用方式，降低风险并提升与战略目标的一致性。
• 公共部门组织可通过将云合规性与价值创造挂钩而非仅关注技术可行性，实现更有效的流程改进。
• 该框架通过明确流程在价值链中的角色，支持在部署与治理模式之间的决策制定。