Enterprise integrity simulation

• US 20070100642A1
• Filed: 10/07/2005
• Published: 05/03/2007
• Est. Priority Date: 10/07/2005
• Status: Active Grant

• Current Assignee: SAP SE
• Original Assignee: SAP AG (SAP SE)
• Inventors: Paulus, Sachar, Bitz, Gunter, Wagner, Guido
• Granted Patent: US 8,781,930 B2
• Time in Patent Office: Days
• US Class Current: 705/35
• CPC Class Codes: G06Q 10/067 Enterprise or organisation modelling
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 99/00 Subject matter not provided for in other groups of this subclass

Abstract

Methods and apparatus, including computer program products, for risk assessment and analysis. Asset data representing a set of assets is received. Threat data representing a set of threats is received. Measures data representing a set of measures is received. A loss expectancy based upon the value of the assets, the potential reduction of value caused by the threats, and the protection of the value caused by the measures is automatically calculated. Project data representing a simulated project is received. A revised loss expectancy is automatically calculated based upon the value of the assets, the potential reduction of value caused by the threats, and the protection of the value caused by the measures as modified by the simulated project. A savings caused by the simulated project is automatically calculated based upon the loss expectancy and revised loss expectancy.

Claims

1. A computer program product, tangibly embodied in an information carrier, for a knowledge processing system, the computer program product being operable to cause data processing apparatus to:

receive asset data representing a set of assets, the asset data including a respective value for each asset in the set of assets having a value;

receive threat data representing a set of threats, each threat in the set of threats potentially reducing the value of one or more of the assets in the set of assets;

receive measures data representing a set of measures, each measure in the set of measures protecting the value of one or more assets;

automatically calculate a loss expectancy based upon the value of the assets, the potential reduction of value caused by the threats, and the protection of the value caused by the measures;

receive project data representing a simulated project, the simulated project modifying one or more assets, threats, or measures;

automatically calculate a revised loss expectancy based upon the value of the assets, the potential reduction of value caused by the threats, and the protection of the value caused by the measures as modified by the simulated project; and

automatically calculate a savings caused by the simulated project based upon the loss expectancy and revised loss expectancy.

2. The computer program product of claim 1, the computer program product being further operable to cause data processing apparatus to:

receive a cost of the simulated project; and

calculate a return on investment based on the savings and the cost.

3. The computer program product of claim 2, the computer program product being further operable to cause data processing apparatus to:

generate a report, the report including the savings caused by one or more simulated projects and/or the return on investment of one or more simulated projects.

4. A computer-implemented method comprising:

receiving asset data representing a set of assets, the asset data including a respective value for each asset in the set of assets having a value;

receiving threat data representing a set of threats, each threat in the set of threats potentially reducing the value of one or more of the assets in the set of assets;

receiving measures data representing a set of measures, each measure in the set of measures protecting the value of one or more assets;

automatically calculating a loss expectancy based upon the value of the assets, the potential reduction of value caused by the threats, and the protection of the value caused by the measures;

receiving project data representing a simulated project, the simulated project modifying one or more assets, threats, or measures;

automatically calculating a revised loss expectancy based upon the value of the assets, the potential reduction of value caused by the threats, and the protection of the value caused by the measures as modified by the simulated project; and

automatically calculating a savings caused by the simulated project based upon the loss expectancy and revised loss expectancy.

5. The method of claim 4, further comprising:

receiving a cost of the simulated project; and

calculating a return on investment based on the savings and the cost.

6. The method of claim 5, further comprising:

generating a report, the report including the savings caused by one or more simulated projects and/or the return on investment of one or more simulated projects.

7. A system comprising:

means for receiving asset data representing a set of assets, the asset data including a respective value for each asset in the set of assets having a value;

means for receiving threat data representing a set of threats, each threat in the set of threats potentially reducing the value of one or more of the assets in the set of assets;

means for receiving measures data representing a set of measures, each measure in the set of measures protecting the value of one or more assets;

means for automatically calculating a loss expectancy based upon the value of the assets, the potential reduction of value caused by the threats, and the protection of the value caused by the measures;

means for receiving project data representing a simulated project, the simulated project modifying one or more assets, threats, or measures;

means for automatically calculating a revised loss expectancy based upon the value of the assets, the potential reduction of value caused by the threats, and the protection of the value caused by the measures as modified by the simulated project; and

means for automatically calculating a savings caused by the simulated project based upon the loss expectancy and revised loss expectancy.

8. The system of claim 7, further comprising:

means for receiving a cost of the simulated project; and

means for calculating a return on investment based on the savings and the cost.

9. The system of claim 8, further comprising:

means for generating a report, the report including the savings caused by one or more simulated projects and/or the return on investment of one or more simulated projects.