ComplOps: A Framework for Continuous Compliance Management in Software Development

The growth of digital regulation worldwide triggers the need of dynamic compliance management techniques into software engineering, raising the necessity of a compliance model that "flows" in parallel with agile and DevOps methodologies, to reduce costs associated with rework due to code rewriting after non-compliance is flagged late in the process. Our work explores the concept called ComplOps, that combines emerging concepts, such as Compliance as Code and Compliance by Design to impose regulatory analyses from the beginning of the development lifecycle, enabling real-time verification. This paper formally describes the ComplOps model and introduces a governance framework that enhances agility and scalability in IT compliance processes.