Search

In interacting with digital apps and services, users create digital identities and generate massive amounts of associated personal data. The relationship between the user and the service provider in such cases is, inter alia, a principal-agent relationship governed by a ‘contract’. This contract is provided mostly in natural language text, however, and remains opaque to users. The need of the hour is multi-faceted documentation represented in machine-readable, natural language and graphical formats, to enable tools such as smart contracts and privacy assistants which could assist users in negotiating and monitoring agreements. In this paper, we develop a Taxonomy for the Representation of Privacy and Data Control Signals. We focus on ‘signals’ because they play a crucial role in communicating how a service provider distinguishes itself in a market. We follow the methodology for developing taxonomies proposed by Nickerson et al. We start with a grounded analysis of the documentation of four smartphone-based fitness activity trackers, and compare these to insights from literature. We present the results of the first two iterations of the design cycle. Validation shows that the Taxonomy answers (10/14) relevant questions from Perera et al.’s requirements for the knowledge-modelling of privacy policies fully, (2/14) partially, and fails to answer (2/14). It also covers signals not identified by the checklist. We also validate the Taxonomy by applying it to extracts from documentation, and argue that it shows potential for the annotation and evaluation of privacy policies as well.

With increasing international trade and growing emphasis on security and efficiency, enhanced information and data-sharing between different stakeholders in global supply chains is required. Currently, data quality is not only problematic for traders, but also for various government agencies that are involved in border control, such as customs authorities, food and health inspection agencies, or border force. We adapt principles from the value cycle modelling in accounting, and show how these principles enabled by ICT can be extended to supply chain management to ensure quality of data reported to customs. We then describe a typical application scenario based on a real but anonymized case, to show that value cycle monitoring can be applied (feasibility), and if applied, what the expected benefits are (usefulness).

Tools and techniques for monitoring and auditing continuous streams of data are increasingly being used. However, adoption has only been investigated in the private sector. In this paper we examine the feasibility of continuous auditing and continuous monitoring in the public sector, specifically for municipalities in the Netherlands. A multiple case study is conducted about the opportunities and needs of continuously monitoring and assessing financial data concerning the social domain: care-related and social services, which have recently been decentralized from the national government to the municipal level. Interviews were held with representatives of six municipalities, administrative bodies, and an accounting firm. The research indicates that continuous monitoring is feasible, and that there is a need for continuous monitoring in the public domain. The ease of adoption depends to a large extent on the choice of whether and how a municipality wants to collaborate in offering social domain services.

Companies, especially manufacturers, are operating in increasing demands of variability and customizability nowadays. They are faced with a multitude of complex rules and regulations that must be complied with, as well as supply chain disruptions that threaten business. Smart manufacturers take advantage of advanced information and manufacturing technologies to enable flexibility in physical processes. However, existing information systems are far from being effective and efficient for compliance monitoring in service-oriented manufacturing. Failure to interface well with different information systems is still a general phenomenon among manufacturers, leading to problems such as delay of goods delivery or missing inventory. This research analyzes transaction codes in information systems using process modelling with simulation, validated by an intensive manufacturing case study. Design principles in IT systems for continuous monitoring and auditing in manufacturing are developed. The results contribute to enterprise systems configuration by proposing internal control measures based on IoT fault detection sensors.

Designing security measures often involves trade-offs between various types of objectives. Multiple stakeholders may have conflicting demands and may have different ideas on how to resolve the resulting design conflicts. This paper reports on an application of value-sensitive design. Based on argumentation theory and social values, the paper develops a structured approach for discussing design conflicts, called value-based argumentation. The application domain examined in the paper is concerned with physical safety and security issues that arise in cross-border shipments. We first identify the kinds of dialogues that take place in this domain, in particular, audit dialogues to determine whether security measures comply with regulations. Based on argumentation theory we develop a formal language and a diagramming approach intended to facilitate parties in identifying, discussing and reaching agreement about security risks and corresponding mitigation measures. Trade-offs can be dealt with by making underlying values explicit. Using a stylized example, the approach was successfully taught to practitioners working with EU customs regulations. Practitioners generally found the approach helpful, in particular to bring out implicit underlying motivations. We conclude by discussing how our approach can be generalized to other kinds of dialogues involving design conflicts.

It has been claimed that continuous assurance can be attained by combining continuous monitoring by management, with continuous auditing of data streams and the effectiveness of internal controls by an external auditor. However, we find that in existing literature the final step to continuous assurance has been left unexplained. In this paper we propose an architecture and procedure for attaining continuous assurance. It consists of a dashboard architecture collecting results of continuous monitoring and continuous auditing, combined with a report generator and workflow system that is able to generate an official assurance report, when required. The proposal is motivated by a case study of a platform for monitoring the security of healthcare Apps. The case indicates that the proposal would be technically and legally feasible. Economic viability has not been investigated.

Big data has been acknowledged for its enormous potential. In contrast to the potential, in a recent survey more than half of financial service organizations reported that big data has not delivered the expected value. One of the main reasons for this is related to data quality. The objective of this research is to identify the antecedents of big data quality in financial institutions. This will help to understand how data quality from big data analysis can be improved. For this, a literature review was performed and data was collected using three case studies, followed by content analysis. The overall findings indicate that there are no fundamentally new data quality issues in big data projects. Nevertheless, the complexity of the issues is higher, which makes it harder to assess and attain data quality in big data projects compared to the traditional projects. Ten antecedents of big data quality were identified encompassing data, technology, people, process and procedure, organization, and external aspects.

Compliance is often achieved 'by design' through a coherent system of controls consisting of information systems and procedures. This system-based control requires a new approach to auditing in which companies must demonstrate to the regulator that they are 'in control'. They must determine the relevance of a regulation for their business, justify which set of control measures they have taken to comply with it, and demonstrate that the control measures are operationally effective. In this paper we show how value-based argumentation theory can be applied to the compliance domain. Corporate values motivate the selection of control measures (actions) which aim to fulfil control objectives, i.e. adopted norms (goals). In particular, we show how to formalize the audit dialogue in which companies justify their compliance decisions to regulators using value-based argunlentation. The approach is illustrated by a case study of the safety and security measures adopted in the context of EU customs regulation.

In this paper, we consider the meaning, roles, and uses of trust in the economic and public domain, focusing on the task of designing systems for trust in information technology. We analyze this task by means of a survey of what trust means in the economic and public domain, using the model proposed by Lewicki and Bunker, and using the emerging paradigm of value-sensitive design. We explore the difficulties developers face when designing information technology for trust and show how our analysis in conjunction with existing engineering design methods provides means to address these difficulties. Our main case concerns a concrete problem in the economic domain, namely the transfer of control from customs agencies to companies. Control of individual items is increasingly untenable and is replaced by control on the level of companies aimed at determining whether companies can be trusted to be in control of their business and to be in compliance with applicable regulations. This transfer sets the task for companies to establish this trust by means of information technology systems. We argue that this trust can be achieved by taking into account philosophical analyses of trust and by including both parties in the trust relationship as clients for whom the information technology systems are to be designed. © 2010 The Author(s).

Customs administrations are exploring system-based approaches to regulatory supervision, taking the entire set of controls in a process into account. In addition to Trusted Traders, which are recognized by a certification process, customs are considering to identify so called Trusted Trade Lanes: companies that collaborate in a trade lane in a reliable manner. In this paper we explore the concept of a trusted trade lane. We identify essential characteristics of a trusted trade-lane, and develop various scenarios in which trade lanes may develop and find ways to demonstrate to the authorities and commercial partners that they conform to these requirements. The characteristics have been evaluated in a workshop with experts. The scenarios are tested against three pilot projects, that aim to improve supply chain visibility. © IFIP International Federation for Information Processing 2016.

There are many conceptualizations and formalizations of decision making. In this paper we compare classical decision theory with qualitative decision theory, knowledge-based systems and belief-desire-intention models developed in artificial intelligence and agent theory. They all contain representations of information and motivation. Examples of informational attitudes are probability distributions, qualitative abstractions of probabilities, knowledge, and beliefs. Examples of motivational attitudes are utility functions, qualitative abstractions of utilities, goals, and desires. Each of them encodes a set of alternatives to be chosen from. This ranges from a small predetermined set, a set of decision variables, through logical formulas, to branches of a tree representing events through time. Moreover, they have a way of formulating how a decision is made. Classical and qualitative decision theory focus on the optimal decisions represented by a decision rule. Knowledge-based systems and belief-desire-intention models focus on an alternative conceptualization to formalize decision making, inspired by cognitive notions like belief, desire, goal and intention. Relations among these concepts express an agent type, which constrains the deliberation process. We also consider the relation between decision processes and intentions, and the relation between game theory and norms and commitments. © 2003 Elsevier B.V. All rights reserved.

Are there ways to improve compliance, safety, security,operational efficiency and information quality ininternational trade? Reduce the administrative burdenfor business and government? Foster the uniformapplication of Customs legislation? Encourage mutualunderstanding between the public and private sector,and even share responsibilities in the fight againstsmuggling, terrorism and criminal organizations?We believe there are, but to do so there is a need forpeople who are knowledgeable in various disciplines.The Master Degree in Customs and Supply ChainCompliance developed by the Rotterdam School ofManagement offers this type of education by integratingthree disciplines: Customs regulations; supply chainmanagement and logistics; and information technologyand auditing. In this article, we discuss the objectivesof the degree and the educational philosophy of theprogramme, and reveal some of the lessons learned insetting it up.

Business process compliance with regulations has been a topic of many research areas in Computer Science such as Requirements Engineering RE, Artificial Intelligence AI, Logic and Natural Language Processing NLP. This work aims to provide a systematic way of establishing and managing compliance to assist decision-making and reporting. Despite many notable advances, few systems deal adequately with legal interpretation and modeling norms in an expressive way that is well-integrated with business modeling practices. In this paper, we bring together two leading systems, Legal-URN and Eunomos, for a comprehensive compliance management solution.

Maintaining regulatory compliance is an increasing concern. Legal Knowledge Management systems could support the work of compliance managers. However, there are challenges to overcome, of interpreting legal knowledge and mapping it onto business processes. In this discussion paper we determine requirements for Legal Knowledge Management systems that can handle these challenges. We argue that an approach to Legal Knowledge Management should consist of four pillars: (1) a legal ontology to express the legal concepts that are central to the interpretation of rules and regulations in practice, (2) natural language processing techniques, to semi-automatically populate the ontology, (3) a systematic method for mapping the legal concepts onto the actual data and business processes of a company, and (4) a method to construct an audit trail as part of the process design, providing legally acceptable evidence of compliance. The challenges are illustrated by an example of MIFID, a set of European regulations in the financial domain.

Much compliance effort concerns adherence to contracts. Parties to a contract need to make sure the other party fulfills the contract. To this end they may require additional controls in the business process. Controls have costs. In this paper we argue that fully automated controls help to lower control costs, because (i) the can help prevent misstatements (compliance by design) or (ii) they increase the quality of audit evidence and thereby reduce the audit risk and additional audit fees. The line of reasoning is illustrated by a case study of the implementation of automated controls on the procurement process for public transport services for the elderly and disabled. The case study suggests open issues, which can be linked to concepts from Normative Multi Agent Systems.

International audience; In this paper, we propose a logic of argumentation for the specification and verification (LA4SV) of requirements on Dung’s abstract argumentation frameworks. We distinguish three kinds of decision problems for argumentation verification, called extension verification, framework verification, and specification verification respectively. For example, given a political requirement like “if the argument to increase taxes is accepted, then the argument to increase services must be accepted too,” we can either verify an extension of acceptable arguments, or all extensions of an argumentation framework, or all extensions of all argumentation frameworks satisfying a framework specification. We introduce the logic of argumentation verification to specify such requirements, and we represent the three verification problems of argumentation as model checking and theorem proving properties of the logic. Moreover, we recast the logic of argumentation verification in a modal framework, in order to express multiple extensions, and properties like transitivity and reflexivity of the attack relation. Finally, we introduce a logic of meta-argumentation where abstract argumentation is used to reason about abstract argumentation itself. We define the logic of meta-argumentation using the fibring methodology in such a way to represent attack relations not only among arguments but also among attacks. We show how to use this logic to verify the requirements of argumentation frameworks where higher-order attacks are allowed [A preliminary version of the logic of argumentation compliance was called the logic of abstract argumentation (2005).]

Regulatory compliance in international trade can be enhanced by facilitating electronic exchange of trade documents to increase the supply chain visibility. Crucial for acceptance of the supply chain visibility concept is trust in the reliability of the data. This depends on both the integrity of information (no data is altered illicitly) and integrity of the flow of goods (no goods are unknowingly added or taken away). The challenge is to determine how these concepts of integrity are interconnected. In this paper, we discuss control measures to ensure integrity of supply chain information and the related goods flow. Such controls consist of three components. First, only trusted traders take part. Second, technical control measures ensure internal consistency of the information system, i.e., the system maintains integrity constraints based on a model of the transactions taking place. Third, physical and organizational control measures mitigate the risk that events in the real world do not correspond to the reported transactions. The usefulness and adequacy of the approach is illustrated with two case studies: the use of electronic seals in the Smart-CM project, and the use of biometrics for authentication in the E-Link project at Schiphol Airport, the Netherlands.

Part 4: Architecture, Security and Interoperability; International audience; We discuss a reference model for security measures to preserve integrity of information. Unlike traditional approaches which focus on an defensive approach to preserving integrity, we also present offensive measures to stimulate integrity of information, by providing feedback from usage. The reference model is used to analyze the security measures proposed in the design of the Dutch national Electronic Patient Dossier (EPD), in particular the projected application for medication records. We conclude that much of the defensive measures were covered, but that some offensive measures are lacking, in particular measures related to trust. This may have harmed adoption.

For inter-organizational systems, integrity of information is crucial: how to make sure that the information represented in a system will continue to faithfully represent business reality? In this paper we present a neo-classical approach to information integrity. We apply „classic? principles of administrative organization and internal control (value cycle; segregation of duties) to a modern network organization. The approach is illustrated with a case study of an e-procurement system for healthcare related transport services. The case illustrates the principles and demonstrates that communication and feedback are crucial for improving and maintaining information integrity.

Part 5: Transformation, Values and Change; International audience; The ongoing financial crisis is forcing governments to consider leaner (less resource intensive) forms of public service delivery. This is a difficult process, especially since recent private sector scandals demand that governments become more vigilant. Public-private collaboration (PPC) needs to address this ‘lean yet vigilant’ challenge. However, PPCs have proven to take a long time to establish and bring to fruition. Hurdles that delay the achievement of goals include the need to agree on standards in an environment with heterogeneous interests, changing laws and unclear revenue models. While literature on managing PPC hints towards the need for both compulsory measures (plan-driven, restrictive) and adaptive measures (learning-driven, leeway), case studies illustrating how these measures can be integrated in practice are scarce. Drawing on the Standard Business Reporting case in the Netherlands, this paper shows that both compulsory and adaptive measures are necessary to advance in multi-actor standardization processes. Our findings indicate that PPC managers need to impose with leeway by taking an engineering approach to architecture development yet providing leeway in the details.

Norm-enforcement models applied in human societies may serve as an inspiration for the design of multi-agent systems. Models for norm-enforcement in multi-agent systems often focus either on the intra- or interagent level. We propose a combined approach to identify objectives for an architecture for self-regulating agents. In this paper we assess how changes on the inter-agent level affect the intra-agent level and how a generic BDI architecture IRMA can be adapted for self-regulation. The approach is validated with a case study of AEO certification, a European wide customs initiative to secure the supply chain while facilitating international trade.

To keep a network of enterprises sustainable, inter-organizational control measures are needed to detect or prevent opportunistic behaviour of network participants. We present a requirements engineering method for understanding control problems and designing solutions, based on an economic value perspective. The methodology employs a library of so-called control patterns, inspired by design patterns in software engineering. A control pattern is a generic solution for a common control problem. The usefulness and adequacy of the control patterns is demonstrated by a case study of the governance and control mechanisms of the Dutch public health insurance network for exceptional medical expenses (AWBZ). © 2010 Operational Research Society Ltd. All rights reserved.

Building collaborative relationships with trusted businesses is a long-term strategy for EU governments. Recently, for the EU Tax and Customs Administration (TCA), the realization of this goal has become more visible with the emerging concept of the Authorized Economic Operator (AEO). Businesses in the member states can apply for the AEO certificate. When it is being granted, simplified control procedures and trade facilitation will be provided by the TCA. A possible "win-win situation" can be achieved, with increased trade efficiency and lowered administrative burden. However, without proper selection of trusted business partners, governments may be worse off due to the adverse selection problem caused by information asymmetry. In this paper, we analyze the cause and effect of the adverse selection in the Government-to-Business relationship building. Further, we show that an IT enabled risk assessment approach can effectively eliminate the G2B information asymmetry and solve the adverse selection problem. The AEO assessment approach of DutchTCA is analysed to give a real life application on how IT is enabling the general risk management approach of the DutchTCA.

A Normative Multi-Agent System consists of autonomous agents who must comply with social norms. Different kinds of norms make different assumptions about the cognitive architecture of the agents. For example, a principle-based norm assumes that agents can reflect upon the consequences of their actions; a rule-based formulation only assumes that agents can avoid violations. In this paper we present several cognitive agent architectures for self-monitoring and compliance. We show how different assumptions about the cognitive architecture lead to different information needs when assessing compliance. The approach is validated with a case study of horizontal monitoring , an approach to corporate tax auditing recently introduced by the Dutch Customs and Tax Authority.

We provide a conceptual analysis of several kinds of deadlines, represented in Temporal Modal Defeasible Logic. The paper presents a typology of deadlines, based on the following parameters: deontic operator, maintenance or achievement, presence or absence of sanctions, and persistence after the deadline. The deadline types are illustrated by a set of examples.

There are two main traditions in defining a semantics for agent com- munication languages, based either on mental attitudes or on social commitments. In this paper, we translate both traditions in a different approach in which the di- alogue state is represented by the beliefs and goals publicly attributed to the roles played by the dialogue participants. On the one hand, this approach avoids the problems of mentalistic semantics, such as the unverifiability of private mental states. On the other hand, it allows use to reuse the logics and implementations developed for FIPA compliant approaches.

This paper is about control mechanisms for virtual organizations. As a case study, we discuss the Renewables Obligation (RO), a control mechanism that was introduced in the United Kingdom to stimulate the production of renewable energy. We apply a conceptual model based on normative multiagent systems (NMAS). We propose to model both the participants and the normative system as autonomous agents, having beliefs and goals. Norms, which can be internalized by the agents as obligations, are translated into conditional beliefs and goals of the normative system, which concern both detection and sanctioning measures. We show that the model can handle both the regulative and the evidential aspects of the case.

In this paper we are interested in argument based reasoning for access control, for example in the context of agents negotiating access to resources or web services in virtual organizations. We use a logical framework which contains agents with objectives concerning access to a resource or provision of a service, including security objectives. The access control mechanism is described by a set of policy rules, that specify that access to a resource or service requires a specific set of credentials. Our contribution is a formalization of the reasoning about access control using a planning theory formalized in Dung's abstract argumentation framework. We build on Amgoud's argumentation framework for plan arguments, which is based on an adaptation of Dung's notion of defence. Our formal argumentation framework allows arguments about the backward derivation of plans from objectives and policy rules (abduction), as well as arguments about the forward derivation of goals from general objectives. We show that reasoning about the feasibility of goals requires mixed goal-plan arguments, and we show how to formalize the plan arguments in Dung's framework without adapting the notion of defence.

In this paper we introduce a logic of abstract argumentation capturing Dung’s theory of abstract argumentation, based on connectives for attack and defend. We extend it to a modal logic of abstract argumentation to generalize Dung’s theory and define variants of it. Moreover, we use the logic to relate Dung’s theory of abstract argumentation to more traditional conditional and comparative formalisms, and we illustrate how to reason about arguments in meta-argumentation.

Co-located with : JELIA 2004 - 9th European conference on logics in artificial intelligence; International audience; In this paper we discuss Liau’s logic of Belief, Inform and Trust (BIT), which captures the use of trust to infer beliefs from acquired information. However, the logic does not capture the derivation of trust from other notions. We therefore suggest the following two extensions. First, like Liau we observe that trust in information from an agent depends on the topic of the information. We extend BIT with a formalization of topics which are used to infer trust in a proposition from trust in another proposition, if both propositions have the same topics. Second, for many applications, communication primitives other than inform are required. We extend BIT with questions, and discuss the relationship with belief, inform and trust. An answer to a question can lead to trust, when the answer conforms to the beliefs of the agent.

In this paper we investigate the specification and verification of infor- mation systems with an organizational structure. Such systems are modelled as a normative multiagent system. To this end we use KBDIOCTL, an extension of BDICTL in which obligations and permissions are represented by directed modal operators. We illustrate how the logic can be used by introducing and discussing various properties of normative systems and individual agents which can be rep- resented in the logic. In particular we discuss the enforcement of norms.

In this paper we introduce the so-called Beliefs-Obligations-Intentions-Desires or BOID architecture. It contains feedback loops to consider all effects of actions before committing to them, and mechanisms to resolve conflicts between the outputs of its four components. Agent types such as realistic or social agents correspond to specific types of conflict resolution embedded in the BOID archecture.

In this chapter we discuss our research on multimodal interaction in a virtual environment. The environment we have developed can be considered as a ‘laboratory’ for research on multimodal interactions and multimedia presentation, where we have multiple users and various agents that help the users to obtain and communicate information. The environment represents a theatre. The theatre has been built using VRML (Virtual Reality Modeling Language) and it can be accessed through World Wide Web (WWW). This virtual theatre allows navigation input through keyboard function keys and mouse, but there is also a navigation agent which tries to understand keyboard natural language input and spoken commands. Feedback of the system is given using speech synthesis. We also have Karen, an information agent which allows a natural language dialogue with the user. In development are several talking faces for the different agents in the virtual world. We investigate how we can increase the user’s commitment to the environment and its agents by providing context and increasing the user’s feeling of ‘presence’ in the environment.

The central research question of this paper is how notions developed in interactive computing such as abstract behavior types, the coordination language Reo, and Boolean circuits with registers, can be used to extend logical input/output nets, or lions for short. Lions are based on input/output logic, a deontic logic which is not used as a (non-classical) inference engine deriving output from input, but as a secretarial assistant for logically assisted transformations from input to output. We consider two extensions of input/output logics and lions. First, we consider input/output logics defined on infinite sequences (or streams) of inputs and outputs. Secondly, we consider lions with AND and register gates, formalizing the behavior of channels and connectors. We discuss also the role of interactive computing in normative multi-agent systems motivating the development of lions.

In this paper we discuss our research on interactions in a virtual theatre that has been built using VRML and therefore can be accessed through Web pages. In the virtual environment we employ several agents. The virtual theatre allows navigation input through keyboard and mouse, but there is also a navigation agent which listens to typed input and spoken commands. Feedback of the system is given using speech synthesis. We also have an information agent which allows a natural language dialogue with the system where the input is keyboard-driven and the output is both with tables as with template driven natural language generation. In development are several talking faces for the different agents in the virtual world. At this moment an avatar with a cartoon-like talking face driven by a text-to-speech synthesizer can provide users with information about performances in the theatre.

Products and services are increasingly offered by value webs, rather than by a single enterprise. Typically, value webs need inter-organizational controls to prevent fraudulent behaviour of actors. To design and analyze controls, we developed the economic value-based methodology e 3-control, which so far has been applied mainly in commercial environments, which are regulated by contractual arrangements. In this paper, we use e 3 control in a highly regulated environment, which contains public-private partnerships, namely the healthcare sector in The Netherlands. Lessons learned include that the notion of economic reciprocity — as present in a commercial setting — is not always apparent in highly regulated environments; and that a highly regulated environment requires artefacts like evidence objects, which can be dealt with as if they were value objects.

Currently international supply chains are facing risks concerning faults in compliance, such as altering shipping documentations, fictitious inventory, and inter-company manipulations. In this paper a method to detect and diagnose fault scenarios regarding customs compliance in supply chains is proposed. This method forms part of a general approach called model-based auditing, which is based on a normative meta-model of the movement of money and goods or services. The modeling framework is proposed on compliance monitoring of supply chains with focus on information systems and compliance reporting tools. The innovation lies in the application and mapping of modeling techniques from dynamical systems engineering to business process analysis for audit and supervision purposes. Specifically, the application domain is where money, goods as well as information are transferred between international supply chain partners. A case study of a leading company in electronics manufacturing applying the model is analyzed.

There has been a lot of research on the use of open data in the fight against corruption. Although there are some promising examples, it appears that a systematic approach is lacking. What are the design principles for an architecture to open up data and thereby reduce corruption? In this paper we use theory about fraud, and about public accountability to derive design principles for an open data architecture. Crucial is the sustained presence of a specific forum: A group of people who are critical, have expertise, are free to challenge the authorities. Unlike the general public, a specific forum has an interest in reviewing the data. The architecture is motivated and illustrated by an extensive example of an E-procurement system in the context of an anticorruption program in Palembang, Indonesia.