For highly regulated industries such as banking and healthcare, one of the major hindrances to the adoption of cloud computing is compliance with regulatory standards. This is a complex problem due to many regulatory and technical specification (techspec) documents that the companies need to comply with. The critical problem is to establish the mapping between techspecs and regulation controls so that from day one, companies can comply with regulations with minimal effort. We demonstrate the practicality of an approach to automatically analyze regulatory standards using Artificial Intelligence (AI) techniques. We present early results to identify the mapping between techspecs and regulation controls, and discuss challenges that must be overcome for this solution to be fully practical.
翻译:对于银行和医疗保健等高度监管行业,云计算的主要障碍之一是遵守监管标准,这是一个复杂的问题,因为公司需要遵守许多监管和技术规格(技术规格)文件。关键的问题是在技术规格和监管控制之间进行测绘,以便公司从第一天起能够尽量遵守监管。我们展示了使用人工智能技术自动分析监管标准的方法的实用性。我们提出了早期结果,以确定技术规格和监管控制之间的绘图,并讨论了为使这一解决方案完全可行而必须克服的挑战。