Compliance management, risk analysis, and auditing are disciplines that are critical for large scale distributed enterprise systems. The way these complex systems are developed and deployed makes the management and enforcement of enterprise goals or policies a hard task. This is also true for compliance management of Business Processes (BPs). Such an observation is emphasized if the authors give compliance management the scope of the whole enterprise model. In this paper, they explain their approach to modeling compliance measures based on policies and present a framework for managing and enforcing compliance policies on enterprise models and BPs.