Webinar on Bowels

1. Rules and Regulations Business Drivers for SOA-based Agile IT Presented by Adrian Bowles, Ph.D. Program Director, Regulatory Compliance Object Management Group [email_address] www.omg.org

3. PRODUCTS Business Runs on Rules PROCESSES PEOPLE POLICIES Suppliers Customers Regulators RULES

4. IT Enables Innovation & Agility Integration , Execution, Refinement Identify & Model Current Processes Identify & Model Alternatives Evaluate Alternatives Context Analysis Intelligence Application Development Opportunity Identification Opportunity Exploitation Design Identify Requirements Identify & Acquire Packages, Frameworks/ Components Construct Components and Aggregates Integration & Operation Opportunity Evaluation/Selection

5. Flexibility by Design Migration Value Infrastructure Management Applications Operating Systems Horizontal Services Domain Components Hardware Renewal Cycle 1-18 months Web 36-60 months 12-24 months

6. Characteristics of Change Rate of Change Cost of Change Low High High Data Business Logic Infrastructure RULES Pricing New Market Entry Fashion Culture

7. The Fundamental Rule Choice P1 P2 P3 P4 Embedded Rules Rule Management P1 P2 P3 P4 r1,r2,r3 Changing a rule should start a ripple effect throughout a system or systems r1,r6 r5 r1,r5,r7 r7 r6 r5 r4 r3 r2 r1

9. Overlapping Intent & Requirements Governance Privacy Security Sarbanes-Oxley Basel II SEC Rules 17a-3/4 PIPEDA NORPDA SB 1386 USA PATRIOT HIPAA GLBA 21 CFR Part 11 Protecting Critical Data/Infrastructure Protecting Private Information Ensuring Transparency & Validity

10. Regulatory Impact by System

11. Automated IT Compliance C-GRID Global Regulatory Information Database Query: SIC/NAICS, Geography… Relevant Regulations Relevant Regulations IT Compliance Policies/Procedures Gap Analysis Updates Goal: Automated Detection of New Regulatory Requirements and Rule-Based Generation of Policies Other Stake-holders Vendors Auditors Regulators Users IT Strategy & Operations Rules Requirements Rules

17. Rules and Regulations Business Drivers for SOA-based Agile IT Presented by Adrian Bowles, Ph.D. Program Director, Regulatory Compliance Object Management Group [email_address] www.omg.org