Business Process Modeling Supporting the Requirements Elicitation of an Audit System: An Experience Report

Business Process Modeling Supporting the Requirements Elicitation of an Audit System: An Experience Report

Edna Dias Canedo, Ian Nery Bandeira, Larissa Pereira Gonçalves, Alessandra de Vasconcelos Sales, Fábio Mendonça, Cláudio Azevedo Costa, Rafael T. de Sousa Jr.
Copyright: © 2023 |Pages: 20
DOI: 10.4018/IJEGR.320192
Article PDF Download
Open access articles are freely available for download

Abstract

Requirements elicitation is a highly relevant part of the software development process. Due to the several techniques that exist to perform it, it is necessary to understand the complexity of this activity for it to be well performed, thus ensuring the quality of the final product. In addition, it is also worth emphasizing that the existence of well-defined processes is essential for the stakeholders' needs to be correctly identified in the initial stages of the software development process. This paper presents an experience report of the requirements elicitation and business process modeling teams. The teams used the best practices and reference frameworks to understand, model, and perform business process enhancements to the Brazilian Unified Health System General Audit Office (AUDSUS) audit system by using the business process model and notation (BPMN). Thus, all software requirements were specified based on the modeled business processes, providing a faster software development process and a more efficient information flow between stakeholders and the teams involved.
Article Preview
Top

1. Introduction

In recent years, most countries that constitute the Organization for Economic Co-operation and Development (OECD) have implemented an extensive reform plan that introduces improvements in the services provided by public administrations in order to ensure their efficiency and quality while addressing the citizens’ needs (Bergmann et al., 2016). However, the incidence of fraud in public service delivery causes users (i.e., citizens, investors, stakeholders, and decision-makers) to mistrust most audit agencies (Zhu et al., 2022).

Auditing is an indispensable element of a regulatory system whose purpose is to reveal deviations from the rules and violations of the principles of legality, efficiency, effectiveness, and economy (Axelsen et al., 2017; Zhu et al., 2022). Furthermore, auditing the public sphere is also essential for public administration since managing such resources is a matter of trust and needs to be managed correctly (Awuah et al., 2022).

In Brazil, the National Audit System within the Unified Health System (SUS) was regulated through Decree nº 1.651 of September 28, 1995. The National Audit System is coordinated by the Unified Health System General Audit Office (AudSUS), an entity within the Brazilian Health Ministry structure. Given that the changes in knowledge function and nature resulting from information technology require constant updating in organizational resources for monitoring, controlling, and producing auditing activities in the public sphere, the Audit System (SISAUD) was instituted on December 4, 2002, representing an advance in modernizing health auditing, socializing information and promoting greater integration among the three spheres of the National Audit System: Federal, State, and Municipal (Melo & Vaitsman, 2007).

Almost twenty years have passed since the institution of SISAUD. Recently, the AudSUS team identified the need for the development of a new system, presenting as determinants the following factors: 1) the Need for an audit tool compatible with new technologies available in the market, such as Artificial Intelligence; 2) Integration of available solutions for strengthening the audit activity; 3) Incorporation of tools that streamline and subsidize the planning and execution stages of the audit activity; 4) Redefinition of control, planning and production mechanisms of the AudSUS workforce; 5) Use of new technologies that allow the execution of remote work with quality; 6) Use of more robust technologies in the execution of the audit activity.

According to previous studies, the quality of software depends on the correct understanding of the end-users and stakeholders’ needs, i.e., the quality of the software requirements (Atoum et al., 2021; Behutiye, Karhapää et al., 2020; Behutiye, Seppänen, et al., 2020; Montgomery et al., 2022; Olsson et al., 2022). Thus, requirements elicitation and specification need to be aligned with business needs in order to meet stakeholder expectations (Ferrari et al., 2021; Karhapää et al., 2021; Montgomery et al., 2022). Therefore, the traditional approach to eliciting requirements through interviews, questionnaires, workshops, and prototyping, is being replaced or complemented by techniques in which the requirements elicitation occurs more precisely to the process in which the software will act (Canedo & da Costa, 2018; de Mendonça et al., 2017; de Sá Mussa et al., 2018; Leão et al., 2019).

Complete Article List

Search this Journal:
Reset
Volume 20: 1 Issue (2024)
Volume 19: 1 Issue (2023)
Volume 18: 4 Issues (2022): 2 Released, 2 Forthcoming
Volume 17: 4 Issues (2021)
Volume 16: 4 Issues (2020)
Volume 15: 4 Issues (2019)
Volume 14: 4 Issues (2018)
Volume 13: 4 Issues (2017)
Volume 12: 4 Issues (2016)
Volume 11: 4 Issues (2015)
Volume 10: 4 Issues (2014)
Volume 9: 4 Issues (2013)
Volume 8: 4 Issues (2012)
Volume 7: 4 Issues (2011)
Volume 6: 4 Issues (2010)
Volume 5: 4 Issues (2009)
Volume 4: 4 Issues (2008)
Volume 3: 4 Issues (2007)
Volume 2: 4 Issues (2006)
Volume 1: 4 Issues (2005)
View Complete Journal Contents Listing