IT Compliance Management Process Modeling Based on Best Practices Reference Models and Qualitative Data

IT is becoming pervasive in all organizations as well as regulatory compliance requirements are becoming increasingly pervasive and burdensome. Several IT frameworks, which have been criticized by many researchers, exist to help organizations to mitigate IT compliance issues. However, the majority of the organizations keep being reactive when dealing with IT compliance. The goal of this paper is to analyze the main IT frameworks and literature and propose to model the IT Compliance Management process. The main contribution of this paper is the model of the IT compliance management process based in both scientific and practitioner viewpoint. We used Design Science Research as research methodology to design our proposal, we also used the concept-centric methodology to perform our literature review, and finally we evaluate our proposal with expert's interviews. We finish our paper with contributions, lessons learned and future work.