You are required to read and agree to the below before accessing a full-text version of an article in the IDE article repository.

The full-text document you are about to access is subject to national and international copyright laws. In most cases (but not necessarily all) the consequence is that personal use is allowed given that the copyright owner is duly acknowledged and respected. All other use (typically) require an explicit permission (often in writing) by the copyright owner.

For the reports in this repository we specifically note that

  • the use of articles under IEEE copyright is governed by the IEEE copyright policy (available at
  • the use of articles under ACM copyright is governed by the ACM copyright policy (available at
  • technical reports and other articles issued by M‰lardalen University is free for personal use. For other use, the explicit consent of the authors is required
  • in other cases, please contact the copyright owner for detailed information

By accepting I agree to acknowledge and respect the rights of the copyright owner of the document I am about to access.

If you are in doubt, feel free to contact

Towards Systematic Compliance Evaluation Using Safety-oriented Process Lines and Evidence Mapping



Timo Varkoi , Timo Mäkinen , Barbara Gallina, Frank Cameron , Risto Nevalainen

Publication Type:

Conference/Workshop Paper


24th European & Asian Systems, Software & Service Process Improvement & Innovation



The role of software is growing in safety related systems. This under-lines the need for software process assessment in many safety-critical domains. For example, the nuclear power industry has strict safety requirements for control systems and many methods are applied to evaluate compliance to domain specific standards and requirements. This paper discusses the needs of the nuclear domain and presents alternatives to develop a process assessment method that takes into account domain specific requirements. The aim is to provide an approach that facilitates the use of assessment findings in evaluating compliance with the do-main requirements and supports other assurance needs. Safety-oriented Process Line Engineering (SoPLE) is studied as a method for mapping assessment criteria to domain specific requirements. A binary distance metric is used to evaluate, how far a process mapping based method would solve problems found in com-pliance evaluation. Based on the results, SoPLE is applicable in this case, but process mapping is not adequate to facilitate compliance evaluation.


author = {Timo Varkoi and Timo M{\"a}kinen and Barbara Gallina and Frank Cameron and Risto Nevalainen},
title = {Towards Systematic Compliance Evaluation Using Safety-oriented Process Lines and Evidence Mapping},
month = {September},
year = {2017},
booktitle = {24th European {\&} Asian Systems, Software {\&} Service Process Improvement {\&} Innovation},
url = {}