A Non-Compensatory Multimetric Framework for Technology Assessment in Regulated Environments
Abstract
Evaluating emerging technologies in regulated environments requires decision frameworks that integrate technical maturity, risk management and compliance. Traditional multi-criteria decision analysis (MCDA) relies on compensatory logic, in which strong performance on some criteria offsets deficiencies in others; outranking methods such as ELECTRE and PROMETHEE do provide veto mechanisms, but their thresholds are elicited from the decision maker and defined on pairwise preference differences, which is incompatible with requirements that are absolute, externally imposed and auditable. This paper proposes a Non-Compensatory Multimetric Framework (NCMF) whose contribution is not the veto mechanism itself but its operationalization: a unary regulatory gate whose thresholds are read from binding legislation (DORA, Solvency II) and instantiated by verifiable evidence in externally audited public disclosures, combined with three indices that provide the component-level instrumentation outranking methods lack — the Integrated Systems Maturity Index (ISMI), the Criticality-Weighted Risk Index (CWRI) and the Regulatory-Gated Mazziotta-Pareto Index (RG-MPI), all derived from a Technology Implementability Index (TII). The framework is validated on two real technology initiatives of a leading insurance group whose authorization outcomes are documented, and benchmarked against AHP, TOPSIS, PROMETHEE II, ELECTRE and the ungated MPI on the same decision matrix. The initiative that the organization actually rejected is technically superior on every technical criterion (ISMI 8.74 vs. 7.82; CWRI 0.0 vs. 54.6) and deficient only in regulatory compliance (75 % vs. 100 % of veto items); consequently AHP, TOPSIS, PROMETHEE II and the ungated MPI all rank it first, in 96.6–100 % of 10 000 Monte-Carlo parameter draws, whereas the proposed framework reproduces both documented outcomes in 100 % of draws. A component-level analysis further localizes 87.9 % of the residual technical risk of the authorized initiative in a single backend component, a diagnostic that no outranking method supplies. The pipeline runs in O(mn^2)time and scales to systems of thousands of components. Transfer to other regulated sectors —banking, medical devices, critical infrastructure— is conditional on the existence of an equivalent mandatory audited disclosure instrument and is stated as a hypothesis requiring sector-specific validation. All code and data are publicly available.
- Referencias
- Cómo citar
- Del mismo autor
- Métricas
Avsuvarova, K. (2023). Navigating digital transformation: Unpacking the impact of DORA on the insurance landscape. SSRN Electronic Journal. https://doi.org/10.2139/ssrn.4549704
Bakke, K., & Haskins, C. (2018). Use of TRL in the systems engineering toolbox. INCOSE International Symposium, 28(1), 587–601. https://doi.org/10.1002/j.2334-5837.2018.00502.x
Batool, A., Zowghi, D., & Bano, M. (2025). AI governance: A systematic literature review. AI and Ethics, 5(3), 3265–3279. https://doi.org/10.1007/s43681-024-00653-w
Challa, K. (2025). Innovations in digital finance and intelligent technologies: A deep dive into AI, machine learning, cloud computing, and big data in transforming global payments and financial services. Deep Science Publishing. https://doi.org/10.70593/978-93-49910-78-2
Circular 1/2018, de 17 de abril, por la que se desarrollan los modelos de informes, las guías de actuación y la periodicidad del alcance del informe especial de revisión del informe sobre la situación financiera y de solvencia, individual y de grupos, y el responsable de su elaboración, Boletín Oficial del Estado § BOE-A-2018-5670 (2018). https://www.boe.es/buscar/doc.php?id=BOE-A-2018-5670
Commission Delegated Regulation (EU) 2015/35 of 10 October 2014 supplementing Directive 2009/138/EC of the European Parliament and of the Council on the taking-up and pursuit of the business of Insurance and Reinsurance (Solvency II), Official Journal of the European Union, L 12 (2015). https://eur-lex.europa.eu/eli/reg_del/2015/35/oj/eng
Commission Delegated Regulation (EU) 2024/1773 of 13 March 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the detailed content of the policy regarding contractual arrangements on the use of ICT services supporting critical or important functions provided by ICT third-party service providers, Official Journal of the European Union, L 2024/1773 (2024). https://eur-lex.europa.eu/eli/reg_del/2024/1773/oj/eng
Dacus, C. L. (2012). Improving acquisition outcomes through simple system technology readiness metrics. Defense Acquisition Research Journal, 19(4), 444–461.
Da Silva, F. F., Souza, C. L. M., Silva, F. F., Costa, H. G., Da Hora, H. R. M., & Erthal Junior, M. (2021). Elicitation of criteria weights for multicriteria models: Bibliometrics, typologies, characteristics and applications. Brazilian Journal of Operations & Production Management, 18(4), 1–28. https://doi.org/10.14488/BJOPM.2021.014
Directive 2009/138/EC of the European Parliament and of the Council of 25 November 2009 on the taking-up and pursuit of the business of Insurance and Reinsurance (Solvency II), Official Journal of the European Union, L 335, 1–155 (2009). https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32009L0138
Florkowski, M., Hayashi, H., Matsuda, S., Moribe, H., Moriwaki, N., Jones, D., & Pauska, J. (2024). Digitally boosted resilience: Digitalization to enhance resilience of electric power system. IEEE Power and Energy Magazine, 22(2), 100–109. https://doi.org/10.1109/MPE.2023.3344554
Gómez-Andújar, N., Sierra Castillo, L., Rivera-Hechem, M., Gaines, S., & Quintana, A. (2024). Moving beyond binary metrics of compliance in small-scale fisheries. Ecology and Society, 29(4), Article 39. https://doi.org/10.5751/ES-15688-290439
Grassi, L., & Lanfranchi, D. (2022). RegTech in public and private sectors: The nexus between data, technology and regulation. Journal of Industrial and Business Economics, 49(3), 441–479. https://doi.org/10.1007/s40812-022-00226-0
Heo, W.-N., Bae, J.-H., & An, D. (2023). The study on Advanced Risk Management Index and applied research for Technology Readiness Assessment (TRA). Journal of the Korea Academia-Industrial Cooperation Society, 24(3), 471–478. https://doi.org/10.5762/KAIS.2023.24.3.471
International Organization for Standardization. (2019). Security and resilience — Business continuity management systems — Requirements (ISO Standard No. 22301:2019). https://www.iso.org/standard/75106.html
Jindal, V., Mittal, S., & Gupta, V. (2024). Insurtech revolution: Navigating the intersection of insurance and technology. International Journal for Multidisciplinary Research, 6(1), Article 12763. https://doi.org/10.36948/ijfmr.2024.v06i01.12763
Kozłowska, J. (2022). Methods of multi-criteria analysis in technology selection and technology assessment: A systematic literature review. Engineering Management in Production and Services, 14(2), 116–137. https://doi.org/10.2478/emj-2022-0021
Kurter, O. (2025). The use of artificial intelligence for decision-making process for strategic management. OPUS Toplum Araştırmaları Dergisi, 22(2), 195–210. https://doi.org/10.26466/opusjsr.1632110
Lee, A. T., Ramasamy, R. K., & Subbarao, A. (2025). Understanding psychosocial barriers to healthcare technology adoption: A review of TAM and UTAUT frameworks [Preprint]. Preprints.org. https://doi.org/10.20944/preprints202501.0074.v1
Libório, M. P., Martinuci, O. D. S., Ekel, P. I., Hadad, R. M., Lyrio, R. D. M., & Bernardes, P. (2022). Measuring inequality through a non-compensatory approach. GeoJournal, 87(6), 4689–4706. https://doi.org/10.1007/s10708-021-10519-x
London, R. L., Glüge, J., & Scheringer, M. (2024). Multi-criteria decision analysis for assessments of chemical alternatives (MCDA-ACA) [Preprint]. ChemRxiv. https://doi.org/10.26434/chemrxiv-2024-dmb5d-v2
Marentek, B., & Triyono, G. (2025). Sistem Pendukung Keputusan Pemeringkatan Kinerja Satuan Pengamanan menggunakan AHP dan TOPSIS. Decode: Jurnal Pendidikan Teknologi Informasi, 5(1), 92–105. https://doi.org/10.51454/decode.v5i1.891
Müller-FrÄ
czek, I. (2023). Periodical measurement of multidimensional phenomena. Acta Oeconomica, 73(2), 305–325. https://doi.org/10.1556/032.2023.00018
Mutua Madrileña Automovilista, S.A. (2024). Informe sobre la Situación Financiera y de Solvencia (SFCR) 2024. Mutua Madrileña Grupo Asegurador. https://www.grupomutua.es/sites/Satellite?blobcol=urldata&blobkey=id&blobtable=MungoBlobs&blobwhere=1591785446489&ssbinary=true
Paul Greene, F. (2025). Govern once/comply many: Leveraging cyber security framework experience to support AI governance. Cyber Security: A Peer-Reviewed Journal, 9(1), Article 49. https://doi.org/10.69554/VBLF1901
Poulle, J.-B., Kannan, A., Spitz, N., Kahn, S., & Sotiropoulou, A. (2024). EU banking and financial regulation. Edward Elgar Publishing. https://doi.org/10.4337/9781035301959
Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on digital operational resilience for the financial sector (Digital Operational Resilience Act - DORA), Official Journal of the European Union, L 333, 1–79 (2022). https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2554
Robles, P., & Mallinson, D. J. (2025). Advancing AI governance with a unified theoretical framework: A systematic review. Perspectives on Public Management and Governance, 8(4), 213–227. https://doi.org/10.1093/ppmgov/gvaf013
Salvador-Carulla, L., Woods, C., De Miquel, C., & Lukersmith, S. (2024). Adaptation of the technology readiness levels for impact assessment in implementation sciences: The TRL-IS checklist. Heliyon, 10(9), Article e29930. https://doi.org/10.1016/j.heliyon.2024.e29930
Signoret, J.-P., & Leroy, A. (2021). Failure mode, effects (and criticality) analysis, FME(C)A. In J.-P. Signoret & A. Leroy, Reliability assessment of safety and production systems (pp. 165–172). Springer. https://doi.org/10.1007/978-3-030-64708-7_10
Sutton, R. T., Pincock, D., Baumgart, D. C., Sadowski, D. C., Fedorak, R. N., & Kroeker, K. I. (2020). An overview of clinical decision support systems: Benefits, risks, and strategies for success. NPJ Digital Medicine, 3(1), Article 17. https://doi.org/10.1038/s41746-020-0221-y
Tabassi, E. (2023). Artificial Intelligence Risk Management Framework (AI RMF 1.0) (NIST AI 100-1). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.AI.100-1
Weger, K., & Yeazitzis, T. (2023). Conceptualizing a socio-technical model for evaluating AI-driven technology. Proceedings of the Human Factors and Ergonomics Society Annual Meeting, 67(1), 1639–1644. https://doi.org/10.1177/21695067231192298
Zangana, H. M., Hassan, N. S., Omar, M., & Al-Karaki, J. N. (2025). Hybrid decision support framework with explainable AI and multi-criteria optimization. Sistem Pendukung Keputusan dengan Aplikasi, 4(2), 84–94. https://doi.org/10.55537/spk.v4i2.1328
Zangana, H. M., & Salih, A. A. (2025). Enhancing business administration through decision support systems: A comprehensive review. Sistem Pendukung Keputusan dengan Aplikasi, 4(2), 45–56. https://doi.org/10.55537/spk.v4i2.1138