Computing system for modeling of regulatory practices

• US 20070203718A1
• Filed: 02/24/2006
• Published: 08/30/2007
• Est. Priority Date: 02/24/2006
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Merrifield, Eric
• Application Number:
  US11/361,199
• Publication Number:
  US 20070203718A1
• Time in Patent Office: Days
• US Class Current: 705/317
• CPC Class Codes: G06Q 10/0635 Risk analysis of enterprise or organisation activities
• CPC Class Codes: G06Q 30/00 Commerce
• CPC Class Codes: G06Q 30/018 Certifying business or products

Abstract

A system and method for providing a business architecture model which clearly identifies regulatory practices applicable to a business, and how these regulatory practices affect different aspects of a business. The business architecture model according to the present system and method may also be easily modified to model the costs and effects of compliance, non-compliance and hypothetical changes to the regulatory practices of a business. Once the model is set up, it can monitor and manage some or all aspects of a business'"'"' regulatory practices in an automated manner. The model may be integrated with a business'"'"' information technology infrastructure to manage and keep track of regulatory practices, as well as to provide notifications when an event occurs related to the regulatory practice.

Claims

1. A computer implemented method of modeling a business, comprising the steps of:

(a) modeling a business;

(b) receiving a plurality of regulatory practices representing regulatory practices applicable to the business;

(c) receiving one or more defined properties for each regulatory practice of the plurality of regulatory practices, the properties representing properties of the regulatory practices;

(d) linking one or more of the plurality of regulatory practices to an information technology service of the business so that the one or more regulatory practices are performed automatically by the information technology service of the business.

2. A computer implemented method as recited in claim 1, further comprising a step (e) of exchanging data between the information technology service and at least one of the regulatory practices and the business model.

3. A computer implemented method as recited in claim 1, wherein steps (b) and (c) are performed after said step (a) is completed.

4. A computer implemented method as recited in claim 1, wherein steps (c) and (d) are performed while steps (a) and (b) are performed.

5. A computer implemented method as recited in claim 1, wherein the one or more regulatory practices performed automatically by the information technology service of the business include at least one of monitoring, managing, keeping track of, reporting on and implementing a regulatory practice, and/or an aspect of the business model impacted by a regulatory practice.

6. A computer implemented method as recited in claim 1, said step (b) of receiving a plurality of regulatory practices representing regulatory practices applicable to the business comprises the step of receiving rules with which the business must comply by law, and/or by any custom, practice or action formally recognized as binding or enforced by an external agency, controlling authority or within the business.

7. A computer implemented method as recited in claim 6, said step (b) of receiving a plurality of regulatory practices representing regulatory practices applicable to the business comprises the step of receiving rules related to the Sarbanes-Oxley Act.

8. A computer implemented method as recited in claim 6, said step (b) of receiving a plurality of regulatory practices representing regulatory practices applicable to the business comprises the step of receiving internal governance practices imposed by the business for complying with the regulations.

9. A computer implemented method as recited in claim 1, wherein said step (a) comprises at least one of the steps of:

receiving a plurality of defined business capabilities representing capabilities of the business;

receiving one or more defined processes of a business; and

receiving an information technology architecture of the business.

10. A computer implemented method as recited in claim 1, wherein said step (c) of receiving one or more defined properties for each regulatory practice of the plurality of regulatory practices includes at least one of:

(c1) indicating the degree to which a regulatory practice does or does not regularly materially impact the financial performance of the business;

(c2) serving as counters for monthly, quarterly, and annual counts for the time a regulatory practice has impacted performance of the business;

(c3) identifying a person who is responsible for a regulatory practice;

(c4) identifying a person to notify when there is an event requiring notification;

(c5) indicating the geographic location where the regulation is applicable;

(c6) indicating the reporting and/or notification required when an event requires a notice;

(c7) indicating behavior or preventative action to be taken to comply with a regulation;

(c8) indicating the cost of compliance with a regulatory practice;

(c9) indicating the cost of non-compliance with a regulatory practice;

(c10) indicating the business risk of non-compliance with a regulatory practice;

(c11) indicating whether or not a regulatory practice is complied with;

(c12) indicating a notification medium for notifying an individual regarding a regulatory practice;

(c13) indicating the percentage of compliant and/or noncompliant events in a given period of time; and

(c14) indicating an event which triggers that an action needs to be taken in order to comply under a regulatory practice.

11. A computer-readable medium having computer-executable instructions for programming a processor to perform a method of modeling a business, the method comprising the steps of:

(a) receiving a plurality of defined business capabilities representing capabilities of the business;

(b) receiving one or more defined capability attributes for each business capability of the plurality of business capabilities, the capability attributes representing attributes of the business capabilities;

(c) receiving a plurality of regulatory practices representing regulatory practices applicable to the business;

(d) receiving one or more defined properties for each regulatory practice of the plurality of regulatory practices, the properties representing properties of the regulatory practices;

(e) linking one or more of the plurality of regulatory practices to an information technology service of the business so that the one or more regulatory practices are performed automatically by the information technology service of the business.

12. A computer readable medium as recited in claim 11, further comprising a step (f) of exchanging data between the information technology service and at least one of the regulatory practices and the business capabilities.

13. A computer readable medium as recited in claim 11, wherein the one or more regulatory practices performed automatically by the information technology service of the business include at least one of monitoring, managing, keeping track of, reporting on and implementing a regulatory practice, and/or a business capability impacted by a regulatory practice.

14. A computer readable medium as recited in claim 11, further comprising the step (f) of displaying a model of the business over a graphical user interface.

15. A computer implemented method of modeling a business, comprising the steps of:

(a) receiving a plurality of defined business capabilities representing capabilities of the business;

(b) receiving one or more defined capability attributes for each business capability of the plurality of business capabilities, the capability attributes representing attributes of the business capabilities;

(c) receiving a plurality of regulatory practices representing regulatory practices applicable to the business;

(d) receiving one or more defined properties for each regulatory practice of the plurality of regulatory practices, the properties representing properties of the regulatory practices;

(e) formatting the business capabilities, one or more capability attributes, regulatory practices and one or more properties according to a predefined schema;

(f) linking one or more of the plurality of regulatory practices to one or more of the plurality of business attributes;

(g) linking one or more of the plurality of regulatory practices to an information technology service of the business so that the one or more regulatory practices are performed automatically by the information technology service of the business;

(h) exchanging data between the one or more attributes and the one or more properties to model the operation of the business.

16. A computer implemented method as recited in claim 15, wherein said step (e) of formatting the business capabilities, one or more capability attributes, regulatory practices and one or more properties according to a predefined schema comprises the step of formatting the business capabilities, one or more capability attributes, regulatory practices and one or more properties as at least one of logical, binary, octal, decimal, hexadecimal, integer, floating-point, character, character string, and user-defined data types.

17. A computer implemented method as recited in claim 15, wherein the one or more regulatory practices performed automatically by the information technology service of the business include at least one of monitoring, managing, keeping track of, reporting on and implementing a regulatory practice, and/or a business capability impacted by a regulatory practice.

18. A computer implemented method as recited in claim 15, said step (c) of receiving a plurality of regulatory practices representing regulatory practices applicable to the business comprises the step of receiving rules with which the business must comply by law, and/or by any custom, practice or action formally recognized as binding or enforced by an external agency, controlling authority or within the business.

19. A computer implemented method as recited in claim 18, said step (c) of receiving a plurality of regulatory practices representing regulatory practices applicable to the business comprises the step of receiving rules related to the Sarbanes-Oxley Act.

20. A computer implemented method as recited in claim 18, said step (c) of receiving a plurality of regulatory practices representing regulatory practices applicable to the business comprises the step of receiving internal governance practices imposed by the business for complying with the regulations.