Business process modelling and security engineering are two important concerns when
developing information system. However current practices report that security is addressed …

Security is considered to be a critical software quality attribute. Tackling security at the
requirements phase helps to avoid the need to rework secure software development issues …

Organizations execute daily activities to meet their objectives. The performance of these
activities can be fundamental for achieving a business objective, but they also imply the …

Abstract The Incident Management (IM) process is one of the core activities for increasing
the overall security level of organizations and better responding to cyber attacks. Different …

The growth in use of business processes (BP) in critical systems, vital to create or maintain
business value in organizations, has driven the need and interest in assessing their risk. For …

In the current scenario, where cyber-incidents occur daily, an effective Incident Management
Process (IMP) and its assessment have assumed paramount significance. While …

Abstract Context The use of Business Process Management Systems (BPMS) has emerged
in the IT arena for the automation of business processes. In the majority of cases, the issue …

The Business Process Modeling Notation (BPMN) has become a broadly accepted standard
for process modeling, but is mostly being used to express the normal execution flow of …

The idea of business processes as a key concept to underpin organisational activities are
increasingly recognised. Business processes must be able to accommodate security …

Risk management has become an essential mechanism for business and security analysts,
since it enable the identification, evaluation and treatment of any threats, vulnerabilities, and …