# Toward Business Integrity Modeling and Analysis Framework for Risk Measurement and Analysis
## 2 Business Integrity Management and Analytics Framework
### Background  
This section presents the related background to financialization, since it is a highly specialized area in BA and data analytics. The view of integrity can be self-evolving. The evolution from transactional integrity to business integrity is underway as businesses evolve to develop a consistent and interdependent view of their policies, processes, and core entities both internally and externally [25]. Managing business integrity requires a holistic view of governing systems, business processes, and core entities, and it should be managed independently [26]. Businesses can work toward regulatory compliance when they can handle all policies, business processes, and core entities together. As businesses are increasingly held accountable for meeting compliance requirements, the Integrated Governance, Risk, and Compliance (GRC) solutions can emerge to help companies stay competitive while meeting compliance [27]. At present, this area is littered with a large number of point solutions, resulting in costly implementation and integration with other compliance solutions.  
As shown in Figure 1, business performance and integrity should be considered simultaneously. Many businesses today leverage business performance management (BPM) tools. They aim to develop various key performance indicators (KPIs) and performance dashboards to facilitate real-time monitoring of the business performance. However, KPIs should be established in conjunction with the integrity and auditability of these KPIs, or the drive toward better KPI often resulted in a skewed/distorted view of the performance of a corporation. As an example, focusing on revenue growth sometimes resulted in less stringent criteria applied to the distinction between gross versus net during the revenue recognition process. On the other hand, focusing on compliance alone without keeping the business performance in mind might result in a rigid business environment and severely limit the business to grow in a rapidly changing business environment. Consequently, managing business integrity intends to provide a methodology for businesses to steer clear from the potential pitfalls of focusing only on performance or compliance.  
The technology implications of managing business integrity are as follows:  
* A quantifiable risk framework that assesses risk across all enterprise functions and the processes that will facilitate risk mitigation across enterprises and service providers.
* Managing business integrity necessitates the continuous tracking of regulation across jurisdictions over time, automates mapping from regulations to obligations, and generates business controls from obligations. Continuous monitoring of the compliance posture based on these business controls enables ongoing assurance that includes full implementation of attestation, investigation, and remediation for these regulatory compliance requirements.
* End-to-end information provenance that records who, when, where, and what for every step in the business process will emerge as an enterprise requirement utilizing provenance-aware middleware, applications, and storage. This has become particularly important as information security has become a growing concern, and it is necessary to determine the extent of an impact accurately when a breach occurs through the provenance on record.
* An integrated GRC repository will emerge for managing provenance, procedure, and event data.