System and method for managing global risk

• US 20020129221A1
• Filed: 12/10/2001
• Published: 09/12/2002
• Est. Priority Date: 12/12/2000
• Status: Active Grant

• Current Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Original Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Inventors: OʼConnor, Christine, Borgia, Evelyn, Miller, Jodi, De Gottal, Graham
• Granted Patent: US 7,433,829 B2
• Time in Patent Office: Days
• US Class Current: 712/1
• CPC Class Codes: G06Q 10/06311 Scheduling, planning or task assignment for a person or group
• CPC Class Codes: G06Q 10/0639 Performance analysis of employees; Performance analysis of enterprise or organisation operations
• CPC Class Codes: G06Q 10/10 Office automation; Time management

Abstract

A system for tracking compliance with policies related to management of risk for a given enterprise provides risk status feedback on a number of managerial levels. The system notifies users of potential problems with non-compliance of enterprise policies set on a high level of enterprise management, and prompts the users to take steps to achieve compliance. The enterprise policies are designed to protect the enterprise from various forms of risk associated with enterprise activities. Accordingly, minimizing risk across enterprise operations, subdivisions, projects and applications produces an overall benefit of reduced liability or exposure to liability for the entire enterprise. A compliance status is provided by business groups at all levels of the enterprise, and consolidated for each management level to which the risk status is promoted. Higher level managers can view summaries of risk management status for the business divisions, and select particular statuses to view the condition of compliance among various business groups for which the manager has responsibility.

Claims

1. A compliance tracking system, comprising:

a first dataset containing data related to policy information;

a second dataset containing data related to a state of an operation activity;

a processing engine coupled to said first and second datasets, and operable to access and manipulate data in said first and second datasets;

a user interface coupled to said processing engine and operable to provide instructions to said processing engine for accessing and manipulating said first and second datasets;

said processing engine being further operable to compare data contained in said first and second datasets and provide indicia of compliance to said user interface based on a result of said comparison.

2. A compliance tracking system according to claim 1, wherein said processing engine further comprises a reporting engine;

and

said reporting engine can operate on said indicia of compliance to produce a compilation of compliance indicia in a summary format.

3. A compliance tracking system according to claim 1, wherein said indicia of compliance pertains to a plurality of portions of said operation activity.

4. A compliance tracking system according to claim 1, wherein said processing engine further comprises a registration engine;

and

said registration engine being operable to accept requests for registration from said user interface, provide a notification to at least another user interface for approval of said registration request, and provide a notification to said user interface indicative of approval or refusal of registration.

5. A compliance tracking system according to claim 1, wherein said instructions include answers to a questionnaire related to assessing a level of compliance.

6. A compliance tracking system according to claim 1, wherein said instructions include information related to at least one of a sensitivity and a criticality of said operation activity with respect to a level of compliance.

7. A compliance tracking system according to claim 2, further comprising:

a management structure having a plurality of management levels; and

said compilation of compliance indicia is accessible to a management level above at least another management level.

8. A compliance tracking system according to claim 7, wherein said instructions include information related to at least one of a sensitivity and a criticality of said operation activity with respect to a level of compliance.

9. A compliance tracking system according to claim 8, wherein said compilation of compliance indicia is accessible to said management level based on said information related to said at least one of a sensitivity and a criticality.

10. A compliance tracking system according to claim 1, further comprising:

a set of role definitions effective to provide a compliance response structure including a plurality of respective responsibilities;

said responsibilities being related to respective portions of said state of said operation activity; and

said instructions being related to said responsibilities whereby a level of compliance is modified based a combination of said responsibilities and respective portions of said state of operation activity.

11. A compliance tracking system according to claim 1, wherein said processing engine further comprises an administration engine;

said administration engine is operable to at least one of input data received from said user interface into said second dataset and provide authorized access to said processing engine through said user interface.

13. A method for tracking and reporting compliance related statuses according to claim 12, wherein said indicia of compliance pertains to a plurality of portions of said activities.

14. A method for tracking and reporting compliance related statuses according to claim 12, further comprising:

receiving a request for registration to provide access to said compliance related statuses;

approving said request; and

providing a notification to a user interface indicative of approval or refusal of registration.

15. A method for tracking and reporting compliance related statuses according to claim 12, further comprising manipulating said risk related data, thereby modifying said indicia.

16. A method for tracking and reporting compliance related statuses according to claim 12, further comprising responding to a questionnaire for assessing said compliance related statuses.

17. A method for tracking and reporting compliance related statuses according to claim 14, wherein said manipulating said risk related data is based on at least one of a sensitivity and a criticality of said activities with respect to a level of compliance.

18. A method for tracking and reporting compliance related statuses according to claim 12, further comprising providing said report to a plurality of risk management levels.

19. A method for tracking and reporting compliance related statuses according to claim 18, wherein said manipulating said risk related data is based on at least one of a sensitivity and a criticality of said activities with respect to a level of compliance.

20. A compliance tracking system according to claim 19, wherein said providing said report is based on said at least one of a sensitivity and a criticality.

21. A method for tracking and reporting compliance related statuses according to claim 12, further comprising:

providing a set of role definitions forming a compliance response structure including a plurality of respective responsibilities; and

modifying a level of compliance based on a combination of said responsibilities and a state of said activities.

22. A method for tracking and reporting compliance related statuses according to claim 12, further comprising providing authorized access to said risk related data compilation.

12. A method for tracking and reporting compliance related statuses, comprising:

providing access to a plurality of policies relating to risk management;

compiling risk related data on activities implicating said policies;

comparing risk related information contained in said data to said policies;

providing an indicia of whether said risk related information complies with said policies based on said comparison; and

providing a report including a compilation of said indicia whereby said compliance related statuses can be tracked.

23. A status tracking and feedback system, comprising:

a set of rules related to desired operation of an enterprise;

a set of data related to enterprise operation;

a comparator operable to compare said set of data with said set of rules to provide a compliance status; and

a user interface operable to permit a user to input information into said set of data and being further operable to display said compliance status.

24. A method for tracking status and providing status feedback, comprising:

accessing a set of rules related to an enterprise operation;

accessing a set of data related to compliance with said set of rules;

comparing said set of data against said set of rules to produce a compliance status;

providing an indication of said compliance status to a user interface; and

accepting instructions through said user interface whereby a condition of said set of data is modified, thereby improving said compliance status.