Orientador: Mauricio Ferreira Magalhães / Dissertação (mestrado) - Universidade Estadual de Campinas, Faculdade de Engenharia Eletrica e de Computação / Made available in DSpace on 2018-08-08T01:16:08Z (GMT). No. of bitstreams: 1 Nader_MarcosVaninePortilhode_M.pdf: 1214383 bytes, checksum: 40e83a8be1c7e86e788d810a8799f6b8 (MD5) Previous issue date: 2006 / Resumo: Duas áreas importantes estão em desenvolvimento: Gerência de Processos de Negócios (Business Process Management) e Orquestração de Web Services (Web Services Orchestration). Ambas têm um objetivo que é integrar aplicações ou outros processos que tenham interfaces web services, usando o paradigma de processos de negócios. Uma linguagem que vem sendo difundida para essas aplicações é a BPEL (Business Process Execution Language). Este trabalho apresenta um framework aplicável à análise e verificação de processos de negócios escritos em BPEL através do uso de Pi-Calculus. Pi-Calculus é uma álgebra de processos que possui mecanismos formais para criação e ativação de processos que se comunicam através da troca de mensagens em canais, usando o modelo de rendezvous síncrono. Nesse framework, o processo BPEL é traduzido para um programa Pi-Calculus. Uma Máquina Virtual Pi-Calculus (MVP) recebe o programa Pi-Calculus e produz todas as reações possíveis, ou seja, gera todos os caminhos de execução que o programa pode seguir. A partir desse resultado, efetua-se a verificação de propriedades como: atendimento às especificações de mais alto nível, ordenação de eventos e ocorrência ou não de deadlocks. Em termos práticos, uma ferramenta desse tipo pode ser incorporada aos Sistemas de Gerência de Processos de Negócios (Business Process Management Systems - BPMS) para ampliar a cobertura de testes durante as fases de análise e implementação de um processo dentro do seu ciclo de vida. Nesses tipos de sistemas, a reparação de um erro durante a fase de execução é muito mais custosa que nos sistemas tradicionais / Abstract: Two important areas have been in development lately: Business Process Management and Web Service Orchestration. In both of them, the objective is to integrate applications with web services interface through business process paradigm. A number of languages have been proposed with consensus being formed around BPEL (Business Process Execution Language). This dissertation presents a framework for BPEL processes analysis and verification through Pi-Calculus. Pi-Calculus is a process algebra with formal mechanisms for processes creation and activation; these processes communicate sending and receiving messages through channels using the synchronous rendezvous model. In this framework, the BPEL process is translated to a Pi-Calculus program, A Pi-Calculus Virtual Machine (MVP) receives a Pi-calculus program and executes all possible reactions, that is, it generates all execution paths possible to be taken. With this result, the properties such as high-level specification accomplishment, events ordering and deadlock freedom are verified. In practical terms, a tool of this sort can be part of a Business Process Management System (BPMS) to broaden test coverage during the analysis and implementation phases within a process life cycle. In these kinds of systems, a repairing mistake during the execution phase is more complex than in traditional systems / Mestrado / Engenharia de Computação / Mestre em Engenharia Elétrica

Det är allt vanligare att organisationer och dess processer genomgår en digital transformation föratt uppnå konkurrensfördelar. Organisationer letar ofta efter effektivare sätt att utföra processer.För att effektivisera processer kan digitala verktyg som Robotic Process Automation (RPA)användas. RPA har under de senaste fem åren blivit populärt bland organisationer då RPA oftastger en snabb return on investment (ROI). Vid ett strukturerat införande av RPA i organisationerkrävs ett förändringsarbete då det kan uppstå utmaningar som behöver hanteras. Befintliglitteratur inom RPA-området beskriver olika typer av metoder och utmaningar vid införande avRPA, men lite är känt om hur utmaningar och förändringar påverkar RPA-införandet och när deförekommer. Studiens syfte är därför att identifiera vilka utmaningar som uppkommit vidinförandet och när de förekommer. Studiens frågeställning lyder: Vilka utmaningar iförändringsarbetet finns det vid införande av RPA? Studien visar att utmaningar som uppkommer bör hanteras i tid för att inte påverka senareaktiviteter i RPA-införandet. Studiens slutsats är att det finns många olika typer av utmaningarsom en organisation ställs inför i förändringsarbetet när de för in RPA. Studiens resultat påidentifierade utmaningar är motstånd i organisationen, förändringsledning,processbeskrivningar, utveckling av RPA och övervakning av RPA. Det bidrag som studien tillförtill forskningsområdet är när utmaningar vid ett RPA-införande kan förekomma och hur derelaterar till varandra under RPA-införandet. / It’s common that organizations and their processes goes through a digital transformation toachieve competitive advantages. Organizations are often looking for more efficient ways ofexecuting their processes. To achieve efficiency in organizations, digital tools like RoboticProcess Automation (RPA) could be used. During the past five years RPA has become popularamong organizations due to a fast return on investments (ROI). When in a structured wayimplementing RPA in organizations, change management should be applied to handle potentialchallenges. Existing literature within the RPA field explains different types of models andholistic challenges when transitioning to RPA, however, little is known about how these changesare affecting the RPA-implementation and when they occur. Consequently, the purpose of thisstudy is to identify what challenges organizations have met during the implementation and whenthe challenges occurred. The question of the study is: What challenges in the change process isthere when implementing RPA? The study shows the importance of managing the challenges that arise initially to prevent futureissues in the RPA-project. The conclusion is that there are many different types of challenges thatan organization will encounter in change management when implementing RPA. The result of thestudy identified following challenges, organizational resistance, change management, processdescription, development of RPA and monitoring of RPA. The contribution of the study to theresearch area is when challenges during a RPA-implementation can occur and how challengesrelate to each other during the RPA-implementation.

Ein Großteil der globalen Merger & Acquisitions (M&A) finden im Dienstleistungssektor statt. Der Integrationsprozess ist ausschlaggebend für den Erfolg einer M&A. Allerdings tritt die erhoffte Wertschöpfung bei einem Großteil der fusionierten Unternehmen nicht ein. Gerade im Dienstleistungssektor ist das Know-How der Organisation in den Prozessen gebündelt und bildet dadurch den Unternehmenswert, daher kommt der Prozessharmonisierung (PH) eine essentielle Bedeutung für das Gelingen der Post Merger Integration (PMI) zu. Eine effiziente PH und die Etablierung eines gemeinsamen Managementsystems wird in der PMI erschwert durch die oft angespannte Situation des Change Prozesses. Zeitdruck, kulturelle Unterschiede, Interessenskonflikte sowie weitere Störfaktoren können das Vorhaben beeinträchtigen. Insbesondere die Integrationsansätze Absorption und Symbiose erfordern eine neue vereinheitlichte Unternehmensstruktur und beeinflussen Managementsystem und Prozesslandschaft eines Unternehmens erheblich. Gleichzeitig gewinnt die Digitalisierung zunehmend an Bedeutung, so dass im Rahmen der PH eine Modernisierung hinsichtlich Industrie 4.0 / Qualität 4.0 geprüft werden sollte. Die vorliegende Arbeit fasst 10 Einzelbeiträge zum Themenbereich PH in fusionierten Dienstleistungsunternehmen im Zeitalter Industrie 4.0 zu einer kumulativen Dissertation zusammen, mit dem Ziel eine Methode zur PH in der PMI zu entwickeln. Der Forschungsmethode des Design Science Research folgend bauen die Einzelbeiträge aufeinander auf, beginnend mit einer systematischen Literaturanalyse, gefolgt von einer Anforderungsanalyse unter Nutzung der Mixed-Methods-Forschung und der Entwicklung und Anwendung eines Artefakts. Als Artefakt präsentiert die vorliegende Arbeit eine Methode, bestehend aus dem Vorgehensmodell ProMerge! mit zugehörigem Tool ProMergeTool!, das fusionierte Organisationen bei der PH in der PMI methodisch unterstützt. Die Anwendbarkeit und Praxistauglichkeit der Methode wird in einem realen Anwendungsfall demonstriert.:VORWORT I ABSTRACT II INHALTSVERZEICHNIS III ABBILDUNGSVERZEICHNIS V TABELLENVERZEICHNIS VI ABKÜRZUNGSVERZEICHNIS VII 1 MOTIVATION UND PROBLEMSTELLUNG 1 2 FORSCHUNGSDESIGN 3 2.1 WISSENSCHAFTSTHEORETISCHE POSITIONIERUNG 3 2.2 FORSCHUNGSZIEL 4 2.3 FORSCHUNGSMETHODE 5 3 ANFORDERUNGEN AN DAS ARTEFAKT 7 4 AUFBAU DER DISSERTATION 9 4.1 ÜBERBLICK 9 4.2 ZUSAMMENFASSUNG DER EINZELBEITRÄGE 11 4.2.1 Bedarfe zur Prozessharmonisierung in fusionierten Dienstleistungsunternehmen im Zeitalter Quality 4.0 11 4.2.2 Methodologies for process harmonization in the post merger integration phase - a literature review 12 4.2.3 Prozessharmonisierung in der Post Merger Integration – Qualitätskriterien für den Integrationsprozess 13 4.2.4 Process Harmonization Phase Model in Post Merger Integration 13 4.2.5 Significance of Quality 4.0 in Post Merger Process Harmonization 14 4.2.6 Successful Post Merger Process Harmonization in the Triangle of Methodologies, Capabilities and Acceptance 16 4.2.7 Mixed Methods approach as requirements analysis of a method for process harmonization in Design Science Research 17 4.2.8 Creating a Method for Post-Merger Process Harmonization 18 4.2.9 Evaluating a Method for Process Harmonization 19 4.2.10 Prozessharmonisierung in der Post-Merger-Integration mit ProMerge! und ProMergeTool! - ein Anwendungsbeispiel 20 5 DISKUSSION UND FAZIT 21 5.1 DISKUSSION DER ERGEBNISSE 21 5.1.1 Gestaltung als Artefakt 21 5.1.2 Problemrelevanz 22 5.1.3 Suchprozess zur Gestaltung des Artefakts 22 5.1.4 Design Evaluation 22 5.1.5 Kommunikation der Forschungsergebnisse 23 5.1.6 Rigorosität der Forschung 23 5.1.7 Forschungsbeitrag 24 5.2 WISSENSCHAFTLICHER BEITRAG 24 5.3 PRAKTISCHER BEITRAG 25 REFERENZEN 27 ANHANG 1: FRAGEBOGEN FÜR EXPERTENINTERVIEWS 30 ANHANG 2: FRAGEBOGEN QUANTITATIVE ANALYSE 31 ANHANG 3: PROMERGE! 36 ANHANG 4: PROMERGETOOL! - AUSSCHNITTE 37 6 EINZELBEITRAG 1 40 7 EINZELBEITRAG 2 41 8 EINZELBEITRAG 3 42 9 EINZELBEITRAG 4 43 10 EINZELBEITRAG 5 44 11 EINZELBEITRAG 6 45 12 EINZELBEITRAG 7 46 13 EINZELBEITRAG 8 47 14 EINZELBEITRAG 9 72 15 EINZELBEITRAG 10 91

[pt] A pandemia da COVID-19 se espalhou rapidamente pelo mundo. No Brasil, várias organizações, como a Cruz Vermelha Brasileira (CVB), atuaram em diversas ações contra a disseminação do vírus e de apoio às populações mais vulneráveis. Em resposta às emergências de saúde pública, os suprimentos de socorro imediatos são essenciais para reduzir danos. Para assegurar a distribuição dos donativos aos beneficiários no tempo certo, é fundamental uma gestão adequada da cadeia de suprimentos (CS). Esta dissertação tem como objetivo principal a revisão dos processos da CVB, à luz da literatura, visando promover condições reais de transformação nos referidos processos, com vistas à melhoria do desempenho organizacional e da eficiência e eficácia na distribuição dos itens de alívio. Baseando-se em uma Revisão de Escopo da literatura, identificar o estado da arte sobre os Fatores Críticos de Sucesso da Logística Humanitária em situações de crise epidemiológicas, como a COVID-19, e as melhores práticas para alcançá-los. Neste trabalho, é conduzido um Estudo de Caso sobre a cadeia logística da CVB em que, através de entrevistas com especialistas e análise documental de publicações oficiais, foi diagramado o fluxograma dos macroprocessos atuais (captação e recebimento de doações, distribuição das doações, recebimento nas filiais, distribuição de última milha). Em seguida, à luz da literatura, identificou-se 10 oportunidades de melhoria, resultando na revisão de seus processos, reformulando e validando os macroprocessos logísticos da CVB, onde foi possível concluir que as melhorias propostas são viáveis e apresentam um potencial significativo de impacto positivo nas atividades humanitárias da organização. / [en] The COVID-19 pandemic has rapidly spread throughout the world. In Brazil, various organizations, such as the Brazilian Red Cross (CVB), have engaged in several actions against the spread of the virus and in support of the most vulnerable populations. In response to public health emergencies, immediate relief supplies are essential to reduce harm. To ensure the timely distribution of donations to beneficiaries, proper supply chain management (SCM) is fundamental. This dissertation aims to review CVB s processes in light of the literature, in order to promote real conditions for transformation in these processes, with a view to improving organizational performance and effectiveness in distributing relief items. Based on a Scoping Review of the literature, the state of the art on Critical Success Factors of Humanitarian Logistics in epidemiological crisis situations, such as COVID-19, and the best practices to achieve them were identified. In this work, a Case Study was conducted on CVB s logistics chain, in which, through interviews with experts and documentary analysis of official publications, the flowchart of current macro-processes (donation capture and receipt, donation distribution, branch receipt, last-mile distribution) was diagrammed. Next, in light of the literature, 10 opportunities for improvement were identified, resulting in the revision of its processes, reformulating and validating CVB s logistics macro-processes, where it was possible to conclude that the proposed improvements are feasible and present significant potential for positive impact on the organization s humanitarian activities.

Purpose: The purpose of this paper is to identify the opportunities that Industry 4.0 brings within the framework of applying Cyber Physical Systems in an environment of a Smart Factory. This paper shall identify the changes within daily business processes and the impact of these changes on the daily business life. Design/Methodology/Approach: The research is carried out as a case study research. Due to a qualitative approach for this case study interviews are conducted and the results are analyzed and discussed. Findings: Industry 4.0 will change the way we are working today and influence businesses and business processes in many ways. Data handling, processes and efficiency will change and the way we perceive manufacturing will change in a long term view. Further Research: It would be recommended to expand this research by conducting more research in this particular field as well as impacts on the employee should be studied more in detail.

Flexibility and Interoperability have become important characteristics for organisations and their business processes. The need to control flexible business processes within an organisation’s boundaries and between organisations imposes major requirements on a company’s process control capabilities. Workflow Management Systems (WFMS) try to fulfil these requirements by offering respective product features. Evidence suggests that the achievement of flexible business processes and an inter-organisational process control is also influenced by implementation processes for Workflow Management Applications (WFMA). [A WFMA comprises the WFMS and "all WFMS specific data with regard to one or more business processes" [VER01]]. The impact of a WFMA implementation methodology on the fulfilment of these requirements is the research scope of the project. The thesis provides knowledge in the following areas: 1. Review of the relationship between workflow management and the claim for process flexibility respectively -interoperability. 2. Definition of a research-/evaluation framework for workflow projects. This framework is composed of all relevant research variables that have been identified for the thesis. 3. Empirical survey of relevant workflow-project objectives and their priority in the context of process flexibility and –interoperability. 4. Empirical survey of the objectives’ achievement. 5. Empirical survey of methodologies / activities that have been applied within workflow projects. 6. Derivation of the project methodologies’ effectiveness in terms of the impact that applied activities had on project objectives. 7. Evaluation of existing workflow life-cycle models in accordance with the research framework. 8. Identification of basic improvements for workflow implementation processes with respect to the achievement of flexible and interoperable business processes. The first part of the thesis argues the relevance of the subject. Afterwards research variables that constitute the evaluation framework for WFMA implementation processes are stepwise identified and defined. An empirical study then proves the variables’ effectiveness for the achievement of process flexibility and –interoperability within the WFMA implementation process. After this the framework is applied to evaluate chosen WFMA implementation methodologies. Identified weaknesses and effective methodological aspects are utilised to develop generic methodological improvements. These improvements are later validated by means of a case study and interviews with workflow experts.

Problem/Purpose: Process prioritisation is an ill-structured and complex problem that remains a mystery phase in business process management (BPM) research. More explorative approaches are called upon to tackle process management problems, to facilitate process innovation and to design new processes in dynamic environments. This dissertation aims (i) to design and evaluate a Prioritisation and Categorisation Method (PCM) for addressing process prioritisation problems; and (ii) to explore process innovation by disruptive technologies. Research methods: This research follows the design science research (DSR) paradigm. The design exploration and the engaged scholarship approaches are also adapted. The demonstration and evaluation of the Prioritisation and Categorisation Method have been conducted with case studies in large Swedish companies, i.e. Seco Tools and Ericsson. An empirical study of the impacts of disruptive technologies on process innovation was conducted at a large insurance company in Sweden. Results: This research has led to the design and evaluation of the PCM: a new context-aware, effective and holistic method for BPM. In addition, the lessons learnt from the insurance case deepened the understanding of the challenges that are faced by a company when exploring new capabilities (e.g. processes and IT) for future business. Such lessons also emphasise the necessity of configuring PCM based upon business contingencies and industry factors in process prioritisation. Contributions: This dissertation contributes a novel method to explore BPM in a holistic, yet flexible and effective way. The challenges identified in process innovations improve the configuration capabilities of the PCM through a deeper understanding of the dynamic capabilities within organisations (Capability Layer Model-CLM). This research contributes design knowledge to DSR in the forms of the PCM as an invention, and the three design principles for the PCM: design by holistics, design by commitments and design by explorations. The research is evaluated as good BPM and good design science research.

Sistemas BPMS surgiram com o objetivo de suportar o modus operandi da gestão por processos nas organizações. Tais sistemas possuem diversas premissas que envolvem a grande interação de usuários de negócio na sua implantação e operação, amparadas por evoluções tecnológicas que permitem a redução drástica de programação e integração com sistemas legados, além do fácil desenvolvimento de indicadores e alteração de regras de negócio. Existem poucos estudos que focam na implantação de sistemas BPMS e avaliação de tais fatores. Esta dissertação buscou através da realização de levantamento bibliográfico e da condução de pesquisa de campo ampliar o conhecimento acerca do tema. A implantação de um sistema BPMS foi realizada através da aplicação de uma pesquisa-ação, o que permitiu a interação e avaliação do tema frente a pontos considerados pela literatura, assim como a descoberta de possíveis fatores a serem considerados. Os resultados obtidos revelam que as proposições não se confirmaram totalmente, o que aponta para um possível distanciamento entre a teoria e a prática. Da mesma forma aponta uma tendência da redução de programação e maior envolvimento de usuários de negócio na implantação e operação de tais sistemas. / BPMS systems have emerged with the goal of supporting the modus operandi of business process management in organizations. Such systems have many assumptions that involve higher interaction of business in its deployment and operation, supported by technological evolutions that allow drastic reduction of programming and integration with legacy systems, beyond the easy development of indicators and changing business rules. There are few studies that focus on BPMS deployment and evaluation of these factors. This dissertation searched through bibliography and the conduction of a field research to extend the knowledge about the subject. The deployment of a BPMS system was carried out by applying research-action method, allowing interaction and evaluation of the theme according to points considered by literature, as well as the discovery of potential factors to consider. The results obtained reveal that the propositions were not fully confirmed, which points to a possible rift between theory and practice. Similarly, it points to a trend of programming reduction and greater involvement of business users in deployment and operation of such systems.

As demandas de um mercado cada vez mais dinâmico e global exigiram das organizações um formato mais flexível que as rígidas estruturas funcionais, sendo que a Gestão por Processos (BPM) surgiu como uma alternativa a tal necessidade. Para auxiliar o sucessos de iniciativas de promoção de BPM, a literatura apresenta os Fatores Críticos de Sucesso de BPM e, dentre eles, está a Arquitetura de Processos (AP). A AP é definida como o que a organização faz sob o ponto de vista de processos, porém, outras definições e considerações quanto à sua importância são apresentadas dispersas na literatura, bem como métodos para sua elaboração, sem que haja um consenso dos conceitos e etapas para construção. Esta dificuldade de consenso foi identificada por um grupo de pesquisa engajado em promover BPM em uma unidade de ensino de uma Instituição de Ensino Superior (IES) pública brasileira que identificou a necessidade de elaborar sua AP, mas não encontrou um método que fosse consensual entre praticantes e teóricos de BPM. A partir deste contexto, surgiu o problema da presente pesquisa e seu objetivo principal: desenvolver um método de elaboração de Arquitetura de Processos e aplicar em uma unidade de uma IES pública brasileira. Para alcançar este objetivo a pesquisa utilizou-se de dois procedimentos metodológicos: 1. Revisão da literatura científica para consolidação do conhecimento acerca do tema AP, tanto dos seus conceitos quanto de seus métodos de elaboração e 2. Pesquisa-ação desenvolvida pelo grupo de pesquisa em conjunto com colaboradores da organização para aplicação e análise do método proposto. Os resultados foram: a identificação de cinco aspectos relevantes da AP, a avaliação dos métodos existentes na literatura, a proposição de um novo método e, por fim, a aplicação do novo método na unidade em questão da IES pública. A originalidade do trabalho foi a consolidação do conhecimento do tema AP, a elaboração de um método que pode servir como guia para outras organizações e a própria AP elaborada com base no contexto da IES. / The increasingly dynamic and global market demanded of organizations a format more flexible than the rigid functional structures, and the Business Process Management (BPM) has emerged as an alternative to such a need. To help the success of initiatives for promoting BPM, the literature presents the Critical Success Factors for BPM and among them is the Process Architecture (PA). So basic, AP is defined as what the organization does from the point of view of processes, however, other definitions and considerations regarding their importance are presented scattered in the literature, as well as methods for their development, without a consensus of the concepts and steps for construction. This lack of consensus has been identified by a research group engaged in promoting BPM in a brazilian public unit of education of a Higher Education Institution (HEI) who attested to the need to develop their PA, but did not find a method that was consensus among practitioners and theoretical of BPM. From that context, the problem that arose as motivation of this research and its main objective was: to develop a method for developing Process Architecture and apply it in a unit of a brazilian public HEI. To achieve this goal the research used two main methodological procedures: 1. Literature Reviews to consolidate the knowledge about the subject PA, both of their concepts as their methods of elaboration and 2. Research-action developed by the research group in conjunction with the organization\'s employees for application and analysis of the proposed method. The results were: the identification of five relevant aspects of AP, the evaluation of existing methods in the literature, the proposal of a new method, and finally, the application of the new method in the relevant unit of HEI. The main contributions of the research were the consolidation of knowledge of the subject AP, devising a method that may serve as a guide for other organizations and the very elaborate AP based on the context of the HEI.

L’essor du Cloud Computing, permettant de partager les coûts et les ressources au travers de la virtualisation, présage une interconnexion dynamique et flexible entre entreprises et fournisseurs. Cependant, cette mise en commun de ressources, données et savoir-faire implique de nouvelles exigences en termes de sécurité. En effet, le manque de confiance dans les structures du Cloud est souvent vu comme un frein au développement de tels services. L’objectif de cette thèse est d’étudier les concepts d’orchestration de services, de confiance et de gestion des risques dans le contexte du Cloud. La contribution principale est un framework permettant de déployer des processus métiers dans un environnement Cloud, en limitant les risques de sécurité liés à ce contexte. La contribution peut être séparée en trois partie distinctes qui prennent la forme d'une méthode, d'un modèle et d'un framework. La méthode catégorise des techniques pour transformer un processus métier existant en un modèle sensibilisé (ou averti) qui prend en compte les risques de sécurité spécifiques aux environnements Cloud. Le modèle formalise les relations et les responsabilités entre les différents acteurs du Cloud. Ce qui permet d'identifier les différentes informations requises pour évaluer et quantifier les risques de sécurité des environnements Cloud. Le framework est une approche complète de décomposition de processus en fragments qui peuvent être automatiquement déployés sur plusieurs Clouds. Ce framework intègre également un algorithme de sélection qui combine les information de sécurité avec d'autres critère de qualité de service pour générer des configuration optimisées. Finalement, les travaux sont implémentés pour démontrer la validité de l'approche. Le framework est implémenté dans un outil. Le modèle d'évaluation des risques de sécurité Cloud est également appliqué dans un contexte de contrôle d'accès. La dernière partie présente les résultats de l'implémentation de nos travaux sur un cas d'utilisation réel. / Nowadays service ecosystems rely on dynamic software service chains that span over multiple organisations and providers. They provide an agile support for business applications, governments of end-users. This trend is reinforced by the Cloud based economy that allows sharing of costs and resources. However, the lack of trust in such cloud environments, that involve higher security requirements, is often seen as a braking force to the development of such services. The objective of this thesis is to study the concepts of service orchestration and trust in the context of the Cloud. It proposes an approach which supports a trust model in order to allow the orchestration of trusted business process components on the cloud. The contribution is threefold and consists in a method, a model and a framework. The method categorizes techniques to transform an existing business process into a risk-aware process model that takes into account security risks related to cloud environments. The model formalizes the relations and the responsibilities between the different actors of the cloud. This allows to identify the different information required to assess and quantify security risks in cloud environments. The framework is a comprehensive approach that decomposes a business process into fragments that can automatically be deployed on multiple clouds. The framework also integrates a selection algorithm that combines security information with other quality of service criteria to generate an optimized configuration. Finally, the work is implemented in order to validate the approach. The framework is implemented in a tool. The security assessment model is also applied over an access control model. The last part presents the results of the implementation of our work on a real world use case.