Governance Requirements Extraction Model for Legal Compliance Validation

We present a model-based approach to extract governance requirements from the law and enterprise regulations, to formal specifications. This is the first step of an end-to-end implemented methodology for validating legal compliance of enterprises to law through logic models. Our UML-based Governance Extraction Model (GEM) is able to extract many legal and enterprise requirements, particularly business process and access-control requirements. Examples from Canadian and USA financial and privacy laws are provided. As a result of our extraction process, logic analyzers were shown to be able to detect compliance faults.