To read this content please select one of the options below:

BPM perspectives to support ICSs: Exploiting the integration of formal verifications into investment service provision processes

Domenico Raucci (Department of Economic Studies, “G. d'Annunzio” University of Chieti-Pescara, Pescara, Italy)
Antonella Santone (Department of Bioscience and Territory, University of Molise, Campobasso, Italy)
Francesco Mercaldo (Department of Medicine and Health Sciences “Vincenzo Tiberio”, University of Molise, Campobasso, Italy)
Tomasz Dyczkowski (Department of Costing, Management Accounting and Control, Wroclaw University of Economics and Business, Wroclaw, Poland)

Industrial Management & Data Systems

ISSN: 0263-5577

Article publication date: 8 June 2020

Issue publication date: 18 July 2020




This paper investigates the criteria for a selective integration, in the multidisciplinary business process management (BPM) areas, between information technologies tools and the company's internal control systems (ICSs) aimed at directing organizational behaviours. Adopting a process-based perspective, the authors propose a formal methodology to increase ICSs aims, related to the segregation of duties (SoDs) models, efficiently and effectively.


The authors examine the applicability of formal verifications to validate a banking process of providing investment services, which is mapped through the workflow management system. To mitigate the state explosion problem of formal methods, the authors propose an efficient methodology that has been proved on the SoDs models in the bank ICSs, as a case study.


The authors’ investigations suggest that in the BPM domain, the banking ICSs aims can benefit from the aforesaid methodologies, originating from the formal methods area, to increase the reliability and correctness in the design, modelling and implementation of the SoDs models.


The proposed methodology is quite general and can be efficiently applied to large-scale systems in different business contexts or areas of the BPM. Its application to the bank's SoD prevents or detects significant weaknesses, operational risks, excessive risk appetite and other undesirable behaviours in the investment services provision processes. This guarantees that the investment ordered/offered is “suitable and appropriate” with the client's risk profile, especially non-professional, required by the MiFID II Directive.



Raucci, D., Santone, A., Mercaldo, F. and Dyczkowski, T. (2020), "BPM perspectives to support ICSs: Exploiting the integration of formal verifications into investment service provision processes", Industrial Management & Data Systems, Vol. 120 No. 7, pp. 1383-1400.



Emerald Publishing Limited

Copyright © 2020, Emerald Publishing Limited

Related articles