Towards a Process-Centered Resilience Framework

The turbulent organizational environment and the intensive use of interconnected, complex IT-systems incur operational risks with increasingly severe and uncertain disruptive effects. The increasing reliance on Information Systems (IS)such as Business Process Management (BPM) systems brought up an urgent need to ensure continuous business operations despite unexpected challenging conditions. In contrast to well-established risk-aware BPM which mainly addresses risk mitigation at design-time and only for known risks, we propose resilient BPM as a complementary approach focusing either at run-time or off-time. Such approaches seek the adjustment and maintenance of operations under disruption. We report on our ongoing work towards the development of a decision support framework to realize resilience in the BPM context. For this approach, measuring resilience on a process level is crucial, since it provides information that allow for better decision-making, learning, and improvement. Nevertheless, there are no suitable holistic measurement systems for resilient BPM available by now. Specifically, this paper motivates the need for operational resilience measurement at the level of processes. It presents the components and operation of our measurement framework, which helps to detect resilience properties of processes based on measures by analyzing process-logs. This information is then exploited to drive a resilience-oriented decision support to increase process resilience.

[1]  John F. Meyer,et al.  Model-based evaluation of system resilience , 2013, 2013 43rd Annual IEEE/IFIP Conference on Dependable Systems and Networks Workshop (DSN-W).

[2]  Christian Zimmermann,et al.  Towards a Detective Approach to Process-Centered Resilience , 2013, STM.

[3]  Alfons Kemper,et al.  Datenbanksysteme - Eine Einführung , 1996 .

[4]  Julia H. Allen,et al.  CERT Resilience Management Model, Version 1.0 , 2010 .

[5]  Julia H. Allen,et al.  CERT Resilience Management Model, Version 1.0 Improving Operational Resilience Processes , 2010 .

[6]  Kathleen M. Sutcliffe,et al.  Organizational resilience: Towards a theory and research agenda , 2007, 2007 IEEE International Conference on Systems, Man and Cybernetics.

[7]  Hajo A. Reijers,et al.  Evaluating workflow process designs using cohesion and coupling metrics , 2008, Comput. Ind..

[8]  Pedro Antunes,et al.  Resilient Business Process Management: Framework and services , 2011, Expert Syst. Appl..

[9]  Julia H. Allen,et al.  Measuring Operational Resilience Using the CERT ® Resilience Management Model , 2010 .

[10]  Jacques Wainer,et al.  Constraint-Based Flexible Workflows , 2003, CRIWG.

[11]  Vincent C. Yen An integrated model for business process measurement , 2009, Bus. Process. Manag. J..

[12]  Mayank Gupta,et al.  Structural metrics for goal based business process design and evaluation , 2005, Bus. Process. Manag. J..

[13]  Stefanie Rinderle-Ma,et al.  Change propagation in collaborative processes scenarios , 2012, 8th International Conference on Collaborative Computing: Networking, Applications and Worksharing (CollaborateCom).

[14]  Robert L. Wears,et al.  Resilience Engineering: Concepts and Precepts , 2006, Quality and Safety in Health Care.

[15]  Mario Piattini,et al.  Measurement in business processes: a systematic review , 2010, Bus. Process. Manag. J..

[16]  Devanandham Henry,et al.  Perspectives on measuring enterprise resilience , 2010, 2010 IEEE International Systems Conference.

[17]  Rafael Accorsi,et al.  Toward Resilience Assessment in Business Process Architectures , 2014, SAFECOMP Workshops.

[18]  Mario Piattini Velthuis,et al.  Measurement in business processes: a systematic review , 2010 .

[19]  Julia Allen Measures for Managing Operational Resilience , 2011 .

[20]  Gerald Quirchmayr,et al.  A Survey of Scientific Approaches Considering the Integration of Security and Risk Aspects into Business Process Management , 2009, 2009 20th International Workshop on Database and Expert Systems Application.

[21]  Allan McConnell,et al.  Preparing for Critical Infrastructure Breakdowns: The Limits of Crisis Management and the Need for Resilience , 2007 .

[22]  Rini van Solingen,et al.  Goal Question Metric (GQM) Approach , 2002 .

[23]  Tom Clark,et al.  Storage Virtualization: Technologies for Simplifying Data Storage and Management , 2005 .

[24]  Stefan Sackmann,et al.  Flexible Workflows and Compliance: A Solvable Contradiction?! , 2015, BPM.

[25]  Karl E. Weick,et al.  Managing the unexpected: resilient performance in an age of uncertainty, second edition , 2007 .

[26]  David Hutchison,et al.  Resilience and survivability in communication networks: Strategies, principles, and survey of disciplines , 2010, Comput. Networks.

[27]  Carl E. Landwehr,et al.  Basic concepts and taxonomy of dependable and secure computing , 2004, IEEE Transactions on Dependable and Secure Computing.

[28]  Mathias Weske,et al.  Business Process Management: Concepts, Languages, Architectures , 2007 .

[29]  Carl Marcus Wallenburg,et al.  The influence of relational competencies on supply chain resilience: a relational view , 2013 .

[30]  Moe Thandar Wynn,et al.  Current Research in Risk-aware Business Process Management - Overview, Comparison, and Gap Analysis , 2014, Commun. Assoc. Inf. Syst..

[31]  B. Joseph Pine,et al.  Making mass customization happen: Strategies for the new competitive realities , 1993 .

[32]  J. L. Rouvroye,et al.  A comprehensive approach to assess operational resilience , 2008 .

[33]  Manfred Reichert,et al.  Flexibility in Process-Aware Information Systems , 2009, Trans. Petri Nets Other Model. Concurr..

[34]  Patrik Berander,et al.  A goal question metric based approach for efficient measurement framework definition , 2006, ISESE '06.

[35]  Katinka Wolter,et al.  Resilience Assessment and Evaluation of Computing Systems , 2012, Springer Berlin Heidelberg.

[36]  Stefan Fenz,et al.  FORISK: Formalizing information security risk and compliance management , 2013, 2013 43rd Annual IEEE/IFIP Conference on Dependable Systems and Networks Workshop (DSN-W).

[37]  Günter Müller,et al.  Resilience - A New Research Field in Business Information Systems? , 2013, BIS.

[38]  Jan Mendling,et al.  A Discourse on Complexity of Process Models , 2006, Business Process Management Workshops.

[39]  J. E. Groves,et al.  Made in America: Science, Technology and American Modernist Poets , 1989 .

[40]  Joachim Melcher Process Measurement in Business Process Management: Theoretical Framework and Analysis of Several Aspects , 2012 .

[41]  Michael Rosemann,et al.  Handbook on Business Process Management 1: Introduction, Methods, and Information Systems , 2010, BPM 2010.

[42]  Ninghui Li,et al.  Satisfiability and Resiliency in Workflow Authorization Systems , 2010, TSEC.

[43]  Michel Bruneau,et al.  A Framework to Quantitatively Assess and Enhance the Seismic Resilience of Communities , 2003 .

[44]  Karl E. Weick,et al.  Managing the unexpected: Assuring high performance in an age of complexity. , 2001 .

[45]  Wasif Gilani,et al.  Models and Methodology for Automated Business Continuity Analysis , 2012, 2012 IEEE 17th International Conference on Engineering of Complex Computer Systems.

[46]  Maria E. Orlowska,et al.  Specification and validation of process constraints for flexible workflows , 2005, Inf. Syst..