Search ::     [ Advanced ]
Username:   Password: Auto login next time?  

RuleXpress: The business tool for expressing and communication business rules.

AttainingEdge : World Class Training For Critical Business Innovations

International Business Rules Forum

 

 

 

 

     ROSS ARCHIVES ...
untitled

Can a Business Rule Be Enforced Differently in Different Contexts?

by Ronald G. Ross

Behavioral rules are one of the two kinds of business rules, the kind that can be broken.[1]  The possibility of violations raises two important questions for business analysts to answer for each such business rule, as follows.

  1. How strictly should the rule be enforced?  Possible levels of enforcement are presented in Table 1 below.[2]

  2. How should the rule be enforced — what violation response is appropriate?  Such responses can be in the form of sanctions (more business rules), reactive procedures, human intervention, or some combination thereof.

The choice of appropriate enforcement level and violation response for a behavioral rule is always a question of business policy — or if you prefer, a special kind of business requirement.

One question remains though:  Can the same behavioral rule have more than one enforcement level and violation response?  The answer to this question — an important one for re-use of the rule — is yes.

Let's take an example.  From health insurance we might have the following rule.

Rule:  The amount claimed for a "sling" must be LE the special limit for an incidental if the claimant is out-of-state and the claim amount is LE $500.

What happens if this rule is violated?  The answer is probably 'it depends'.  In other words, both the enforcement level and the response to a violation may be selective to circumstances.  That's especially true if we consider re-use of the rule cross-functionally.

From a business perspective, re-use of the rule means the rule is to be applied at different points with the company's business process(es).  For example, the rule might be used both in responding to customer queries (e.g., "Would I be covered if …?") and for validating actual claims.  Clearly, the appropriate level of enforcement and violation response depends on the situation.

  • For customer queries, there might be no real enforcement at all, simply a polite informational message.

  • For validating claims, the rule is strictly enforced, with outright rejection a real possibility.

Specifying Context for Behavioral Business Rules

Here then is a more complete specification about the business rule about using RuleSpeak.[3]

Rule:  The amount claimed for a "sling" must be LE the special limit for an incidental if the claimant is out-of-state and the claim amount is LE $500.

  Applicability Condition Enforcement Level Violation Response
1. The claim is submitted for inquiry only. guideline Return polite message to the submitter.
2. The claim is submitted for payment. strictly enforced Mark the claim non-payable.

This more complete specification introduces the notion of applicability condition.  Essentially, applicability conditions represent a kind of externalized "if" condition.

Note that the rule statement remains exactly as it was before — no changes in its expression.  Think of the actual business rule then as that part of the decision logic that remains constant even if enforcement levels and violation responses vary for different circumstances.

Why is that important?  In a business with 1,000s of rules, keeping your eye on the 'constants' is not merely helpful, it's essential.  Otherwise, the number of rules starts to balloon out of control.  By the way, that's one highly undesirable consequence of if-then syntax of rule expression.[4] 

From a business perspective, an applicability condition can be viewed as a context of enforcement.  Potential contexts might fall into any of the following six categories:[5] 

  1. A business thing, or verb concept (fact type) about some thing(s).
  2. A business process, or input/output thereof.
  3. A business location or jurisdiction, or linkage between locations.
  4. An organizational unit or role within a business, or work product that is handed-off between such units or roles.
  5. A business event (point in time), or period of time.
  6. A business goal or objective, or means to achieve it.

The earlier sample business rule specification was based on the second of these, business processes.  Since business rules and business processes are so often addressed by business analysts in tandem, that kind of applicability condition is the most commonly recognized in today's work with business requirements.

A Word about Semantics and Time

Formally, applicability conditions are not part of the semantics (meaning) of a business rule per se.  This distinction is usually not hard to follow.  Potential applicability conditions that are time-based, however, do present a special challenge.

In using applicability conditions, it is important to remember the business rule must always be true for as long as the rule remains in effect — even if its enforcement is so light as to be negligible.  If, at any time, the business rule does not have to be true then there is some specification (semantics) needed for the rule itself.

Suppose, for example, the earlier 'sling' rule is effective only during 2011, not before or after that particular year.  That means the rule does not have to be true before 2011 and after 2011.  That's part of semantics of the business rule,[6] not any applicability condition.

That brings us to the bottom line principle for what constitutes an actual business rule:  The business rule is whatever should be true all the time, no matter how lightly or how strongly the rule is enforced while it applies.

Table 1.  Levels of Enforcement for Behavioral Rules
and Their Implications for Designing Procedures.

Level of Enforcement

Description

Implication for Designing Procedures

strictly enforced

If an actor violates the behavioral rule, the actor cannot escape sanction(s).

When a violation is detected, the event producing the violation is automatically prevented, if possible, and a designated violation response, if any, is invoked automatically.

deferred enforcement

The behavioral rule is strictly enforced, but such enforcement may be delayed — e.g., until another actor with required skills and proper authorization can become involved.

When a violation is detected, the event producing the violation is allowed, and the relevant work is handed off to another worker (possibly by insertion into a work queue). Additional business rules giving timing criteria may be desirable to ensure that action is taken within an appropriate timeframe.

override by pre-authorized actor

The behavioral rule is enforced, but an actor with proper before-the-fact authorization may override it.

When a violation is detected, if the actor involved is pre-authorized, that actor is given an opportunity to override the rule. Overrides by actor and business rule should be tracked for subsequent review.

override with real-time waiver

The behavioral rule is enforced, but an actor may request a real-time waiver from another actor having before-the-fact authorization to give such waivers.

When a violation is detected, the actor involved is given an opportunity to interactively request a waiver from a duly-authorized actor. Additional business rules giving timing criteria may be desirable to ensure that some action is taken within an appropriate timeframe. Waivers should be tracked by actor and business rule for subsequent review.

post-justified override

The behavioral rule may be overridden by an actor who is not explicitly authorized; however, if the override is subsequently deemed inappropriate, the actor may be subject to sanction(s).

When an override of a violation occurs, a review item (with all relevant details) should be inserted into the work queue of an appropriate actor for review and possible action.

override with explanation

The behavioral rule may be overridden simply by providing an explanation.

When a violation is detected, the actor involved is given an opportunity to override the business rule by providing a mandatory explanation. Overrides should be tracked by actor and business rule for subsequent review.

guideline

Suggested, but not enforced.

When a violation is detected, the actor involved (if authorized) is simply informed/reminded of the behavioral rule.

 

References

[1]  Ronald G. Ross, "What Is a Business Rule?" Business Rules Journal, Vol. 11, No. 3 (Mar. 2010), URL:  http://www.BRCommunity.com/a2010/b525.html return to article

[2]  Ronald G. Ross, Business Rule Concepts:  Getting to the Point of Knowledge, 3rd ed.:  Business Rule Solutions, LLC, ©2009, 2005, 1998, p. 135.  ISBN 0-941049-07-8.  Available at http://www.brsolutions.com/b_concepts.phpreturn to article

[3]  Basic RuleSpeak guidelines are available for free in English, Spanish, German, and Dutch on www.RuleSpeak.comreturn to article

[4]  Ronald G. Ross, "What's Wrong with If-Then Syntax For Expressing Business Rules ~ One Size Doesn't Fit All," Business Rules Journal, Vol. 8, No. 7 (July 2007), URL: http://www.BRCommunity.com/a2007/b353.htmlreturn to article

[5]  Based on the six columns (primitives) of the Zachman Architecture Framework. return to article

[6]  Even if specified as separate effective dates and times (meta-data), rather than as part of the rule statement itself. return to article



standard citation for this article:
Ronald G. Ross, "Can a Business Rule Be Enforced Differently in Different Contexts?" Business Rules Journal, Vol. 11, No. 9 (Sep. 2010), URL:  http://www.BRCommunity.com/a2010/b552.html  

 about . . .

 RONALD G. ROSS


Ronald G. Ross is recognized internationally as the "father of business rules." He has Chaired the annual Business Rules Forum since 1997. He was a charter member of the Business Rules Group in the 1980s, and an editor of two landmark BRG papers, The Business Motivation Model and the Business Rules Manifesto. He is active in standards development, with core involvement in SBVR.

Mr. Ross is Executive Editor of BRCommunity.com and its flagship publication, Business Rules Journal. He is author of eight professional books, including Business Rule Concepts (2009), a just released 3rd edition of his popular, easy-to-read 1998 handbook. Mr. Ross speaks frequently at industry events worldwide.

Mr. Ross is Co-Founder and Principal of Business Rule Solutions, LLC and is actively engaged in consulting, training and research. He co-developed RuleSpeak®. Mr. Ross gives highly regarded public seminars in North America through AttainingEdge and in Europe through IRM-UK.

For additional information about Mr. Ross, please visit his personal website at www.RonRoss.info.

September 2010
Can a Business Rule Be Enforced Differently in Different Contexts?

August 2010
How Far Can You Take Decisioning?

July 2010
Business Rules vs. System Design Choices

June 2010
Four Useful Constructs for Developing a Structured Business Vocabulary: Special-Purpose Elements of Structure for Fact Models

May 2010
Eight Things You Need to Know About Fact Types Bringing Verbs into Structured Business Vocabulary

April 2010
Business Vocabulary: The Most Basic Requirement of All

March 2010
What Is a Business Rule?

February 2010
CRUD in Business Rules: Accident-Prone Decision Logic

January 2010
The Point of Knowledge

December 2009
When is an Exception Really an Exception? The Business Rule Principles of Accommodation and Wholeness

November 2009
Verb-ish Models for Verbalization: Give Us Back Our Verbs!

October 2009
From Rulebook Management to Business Governance: Where Business Rules Fit

September 2009
What You Need to Know About Rulebook Management

August 2009
When Is a Door Not a Door? ~ Basic Ideas of the Business Rules Paradigm

July 2009
General Rulebook Systems (GRBS): What's the General Idea?

June 2009
Becoming Strategy-Driven: The Policy Charter

May 2009
Product Quality and a Longer-Term View: A 'Simple' Matter of Business Policies

April 2009
RuleSpeak® Sentence Forms: Specifying Natural-Language Business Rules in English

March 2009
The Rulebook: To Play Ball You Need Rules

February 2009
Extreme Business Agility (Part 6): A Manifesto-in-Progress on the Semantic Re-Engineering of Products

January 2009
Extreme Business Agility (Part 5): The Optimal Edge of Business Performance

December 2008
Extreme Business Agility (Part 4): Change Deployment Hell

November 2008
Extreme Business Agility ~ Part 3: Examples of Non-Agile vs. Agile Business Capabilities

October 2008
Extreme Business Agility ~ Part 2: A Semantic Approach to Re-Engineering Your Company's Products

September 2008
Extreme Business Agility — Part 1: A Value Chain for Re-Engineering Your Company’s Products

August 2008
My Son, Business Rule Analyst — Governance and Compliance Through Young Eyes

July 2008
Rules vs. Processes (Again) — Part 2: Now for Events

June 2008
Rules vs. Processes (Again) — Part 1: There’s Simply No Need for Confusion

May 2008
Legacy Modernization, Semantics, and the Knowledge Economy ~ Have You Connected the Dots Yet?!

April 2008
The Emergence of SBVR and the True Meaning of ‘Semantics’: Why You Should Care (a Lot!) ~ Part 2

March 2008
The Emergence of SBVR and the True Meaning of ‘Semantics’: Why You Should Care (a Lot!) ~ Part 1

February 2008
The Phoenix Strategy ~ A Lower-Risk Approach to Rejuvenating Systems and Legacy Modernization

January 2008
'Rules of Record' Why 'System of Record' Isn't Enough

December 2007
The Decision Center: A Center of Excellence for Coordinating Business Rules and Other Process 'Smarts'

November 2007
The Latency of Decisions ~ New Ideas on the ROI of Business Rules

October 2007
Legacy Systems -- Poorly Engineered or Over-Engineered? New Insights about Business Rules and Enterprise Decisioning

September 2007
The Value of Decisions ~ New Ideas on the ROI of Business Rules

August 2007
A Case of Dueling Manifestos? Business Rules and Enterprise Decision Management

July 2007
What's Wrong with If-Then Syntax For Expressing Business Rules ~ One Size Doesn't Fit All

June 2007
Are IT Terms Fundamental to Every Business? Not!

May 2007
Are all Rules Business Rules? Not!

April 2007
Are Software Requirements Rules? Not!

March 2007
Are Integrity Constraints Business Rules? Not!

February 2007
From Rule Management to Business Governance, Part 4: Governance Engineers and the Chief Governance Officer (CGO)

January 2007
From Rule Management to Business Governance, Part 3: Re-Engineering the Governance Process

December 2006
From Rule Management to Business Governance, Part 2: Governance and How it Relates to Business Rules

November 2006
From Rule Management to Business Governance, Part 1: Governance and How it Relates to Business Rules

October 2006
Rules and Processes: Examples Showing How They Relate

September 2006
The Meaning of Things: Definitions, Intensions, Rules, and Extensions

August 2006
Re-Vitalize, Don't Just Re-platform! ~ Three Tests for Whether Your Company 'Gets It' with Respect to Re-Platforming Business IP

July 2006
The Dirty Secrets About Your Company's Business IP That Nobody Wants to Talk About

June 2006
A Personal Insurance Saga ~ The Economics of Business Rules

May 2006
Concepts, Definitions, and Rules: RuleSpeak® Practices

April 2006
The RuleSpeak® Business Rule Notation

March 2006
How Rules and Processes Relate ~ Part 6. Point-of-Knowledge Architecture (POKA)

February 2006
How Rules and Processes Relate ~ Part 5. Scripts -- Rule-Friendly Process Models

January 2006
How Rules and Processes Relate ~ Part 4. Business Processes vs. System Processes

December 2005
How Rules and Processes Relate ~ Part 3. Three Best Practices for Designing Business Processes with Rules

November 2005
How Rules and Processes Relate ~ Part 2. Business Processes

October 2005
How Rules and Processes Relate ~ Part 1. The Challenges

September 2005
Rule Quality ~ The Route to Trustworthy Business Logic

August 2005
Decision Tables, Part 2 ~ The Route to Completeness

July 2005
Decision Tables, Part 1 ~ The Route to Consolidated Business Logic

June 2005
Rule Reduction ~ The Route to Atomic Business Rules

May 2005
Essence Definitions and Business Rules ~ Developing Stable Anchor Points for Operational Knowledge

April 2005
Can You Violate Structural Rules? (part 3) ~ The Difference Between Breaking Rules and 'Breaking' Knowledge

March 2005
Can You Violate Structural Rules? (Part 2) ~ The Difference Between How to Compute and How to Behave

February 2005
Can You Violate Structural Rules? (Part 1) ~ The Difference Between Violations and Bad Decisions

 

Janauary 2005
Business Rules and Knowledge Workers ~ Getting to the 'Point of Knowledge'

 

December 2004
Can a Definition be Violated? ~ Definitions and Business Rules

 

November 2004
Rustling Up Good Definitions ~ There's a Lot Less and a Lot More to It

 

October 2004 

Clarifying Clarifications ~ Universal 'And' to the Rescue

 

September 2004 

Relearning the Basics of Communicating ~ Business Semantics and Business Rules

 

August 2004 

The Light World vs. the Dark World ~ Business Rules for Authorization

 

July 2004 

Best-Fit Decision Points ~ How They Fit into the Business Rule Approach

 

June 2004 

What Rule Independence Means to System Models ~ Less and More than You Think!

 

May 2004 

The Semantics Lexicon ~ Terms For The Business Rules / Smart Process

 

April 2004 

Don't Reinvent Rule Engines!

 

March 2004 

Rules And Compliance Tactics

 

February 2004 

Tracing the Path of Rule Reduction

 

December 2003

Do Rules Decompose To Processes Or Vice Versa?

 

November 2003

Should You Encapsulate Knowledge in Modeling Real-World Things?

 

October 2003

Business Rules, Encapsulation, and Models of the Real World

 

September 2003

Business vs. Environment in Business Models

 

August 2003

Requirement Statement vs. Rule Statement

 

July 2003

Rules as Constraints:  On or By the System Design?

 

June 2003

Rules Reveal Events -- Not Actions

 

May 2003

Actions Are Not Rules (and Vice Versa)

 

April 2003

The Definitions of 'Business Rule' and 'Rule'

 

March 2003

Business Problems Addressed by the Business Rule Approach

 

January 2003

About the Business Rules Manifesto ~ The Business Rule Message in a Nutshell

 

November 2002

Business Rules for the Company's Provisioning Processes ~ There’s a Lot More to Reference Data than Just Data!

 

September 2002

The Terminator -- I'll be Back (with Just the Right Term)

 

July 2002

What Does it Mean to be Business-Driven? (Part 2)

 

May 2002

What Does it Mean to be Business-Driven? (Part 1)

 

March 2002

A Telltale E-mail Trail:  The Case for In-Line Business Rule Analysis

 

January 2002

Managing M x N Vs. M + N, Market-Driven Economies, and Other eCommerce Issues (part 2)

 

November 2001

Managing M x N Vs. M + N, Market-Driven Economies, and Other eCommerce Issues (part 1)

 

September 2001

The BRS Rule Classification Scheme

 

July 2001

Minding Your P's and Q's

 

May 2001

RuleSpeak"! -- Templates And Guidelines For Business Rules

 

March 2001

Business Rules In Business Processes ~ Title Rules For Process And Rules For Product/Service

 

January 2001

What Is Rule Management About?

 

November 2000

Let's Make a Deal: A Killer App for Business Rules

 

September 2000

The Re's Of Business Rules

 

July 2000

What Are Fact Models And Why Do You Need Them? (Part 2)

 

May 2000

What Are Fact Models And Why Do You Need Them? (Part 1)

 

March 2000

What is a 'Business Rule'?

 

January 2000

Current Thoughts On Expressing Business Rules

 

November 1999

The Fin de Siegle Legacy Mindset
 

September 1999

Analysis Paralysis Just May Save Your Life
 

July 1999

If We Had Started Coding Already...
 

May 1999

Your Core Business Processes Need a Rule Engine
 

March 1999

Who or What is a True Business Analyst?
 

January 1999

Four Things Wrong with the Way We Develop Information Systems

 

 

 

 





[ Home ] [ Staff ] [ About BRC Publications ] [ Editorial Feedback ] [ About BRCommunity ]
[ Contributor's Guidelines ] [ Privacy Policy ] [ Technical Support ]