Open Access

Engineering Compliant Enterprise Systems: Architectural Constraints and Quality Practices in Regulated Industries

https://doi.org/10.55640/ijmcsit-v03i07-06

PDF

Oleksandr Orlov ¹ ,

⁴ Co-Founder and Chief Technology Officer, Andersen

Abstract

Objectives: This paper addresses the persistent conflict between project velocity and regulatory compliance in enterprise software engineering within regulated markets. It aims to demonstrate that treating compliance as a late-stage validation phase leads to significant technical debt and project failure.

Methods: The study introduces the Organizational Readiness Model (ORM), a framework developed through a qualitative analysis of executive-level engineering engagements in the U.S. healthcare sector. The model categorizes readiness into three dimensions: Process, Architectural, and Human Capital.

Results: The application of the ORM was evaluated through a case study of ProScan Imaging, a large-scale teleradiology network. Implementing the ORM allowed for a 50% reduction in delivery timelines compared to historical benchmarks by integrating compliance into the initial architectural design.

Conclusions: Successful delivery in high-stakes environments requires organizations to achieve a regulated operational state before project commencement. Prioritizing maintainability, vendor independence, and observability as core safety properties ensures long-term system integrity and clinical safety.

Keywords

Enterprise engineering, regulatory compliance, HIPAA, software architecture

References

Bass, L., Clements, P., & Kazman, R. (2021). Software Architecture in Practice (4th ed.). Addison-Wesley Professional.

Beyer, B., Jones, C., Petoff, J., & Murphy, N. R. (2016). Site Reliability Engineering: How Google Runs Production Systems. O'Reilly Media.

Forsgren, N., Humble, J., & Kim, G. (2018). Accelerate: The Science of Lean Software and DevOps: Building and Scaling High Performing Technology Organizations. IT Revolution Press.

Health Insurance Portability and Accountability Act of 1996 (HIPAA), Pub. L. No. 104-191, 110 Stat. 1936 (1996).

HHS Office for Civil Rights. (2023). HIPAA Enforcement Highlights. U.S. Department of Health and Human Services. https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/data/index.html

ISO/IEC 27001:2022. Information Security, Cybersecurity, and Privacy Protection — Information Security Management Systems — Requirements. International Organization for Standardization. https://www.iso.org/standard/27001

Kruchten, P., Nord, R. L., & Ozkaya, I. (2012). Technical Debt: From Metaphor to Theory and Practice. IEEE Software, 29(6), 18-21. https://www.researchgate.net/publication/233813965_Technical_Debt_From_Metaphor_to_Theory_and_Practice

NIST. (2020). Special Publication 800-207: Zero Trust Architecture. National Institute of Standards and Technology. https://csrc.nist.gov/pubs/sp/800/207/final

NIST. (2024). Special Publication 800-66r2: Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide. National Institute of Standards and Technology. https://csrc.nist.gov/pubs/sp/800/66/r2/final

Nygard, M. T. (2018). Release It!: Design and Deploy Production-Ready Software (2nd ed.). Pragmatic Bookshelf.

Office of the National Coordinator for Health Information Technology (ONC). (2023). Health IT Playbook. HealthIT.gov. https://www.healthit.gov/playbook/

Richards, M., & Ford, N. (2020). Fundamentals of Software Architecture: An Engineering Approach. O'Reilly Media.

United States Congress. (2009). Health Information Technology for Economic and Clinical Health (HITECH) Act, Title XIII of Division A and Title IV of Division B of the American Recovery and Reinvestment Act of 2009 (ARRA), Pub. L. No. 111-5.

Woods, E., & Rozanski, N. (2011). Software Systems Architecture: Working With Stakeholders Using Viewpoints and Perspectives (2nd ed.). Addison-Wesley Professional.

Most read articles by the same author(s)

1 2 3 4 5 6 7 8 9 10 > >>

International Journal of Modern Computer Science and IT Innovations

Engineering Compliant Enterprise Systems: Architectural Constraints and Quality Practices in Regulated Industries

Abstract

Keywords

References

Most read articles by the same author(s)

Similar Articles