A Secure Business Process Modelling For Better Alignment between Business and IT

The existing information system (IS) development methods do not meet the requirements to resolve security-related IS problems and they fail to provide for the successful integration of security and systems engineering during all development process stages. Security should be considered during all software development process and the requirements specifications should be identified. This paper aims to propose an integrated security and IS engineering approach in all software development process stages by using i* language. The proposed framework is divided into two separate parts: modelling information technology system and modelling IS security. The results indicates that considering security IS goals in the whole system development process can have a positive influence on system implementation, better meet business expectations and positively impacts on business process performance.