MANAGING A COMPANY'S COMPLIANCE WITH MULTIPLE STANDARDS AND PERFORMING COST/BENEFIT ANALYSIS OF THE SAME

• US 20090326997A1
• Filed: 06/27/2008
• Published: 12/31/2009
• Est. Priority Date: 06/27/2008
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Becker, Jennifer G., Rivera, Theodore F., Tate, Adam, Will, Scott A.
• Application Number:
  US12/147,721
• Publication Number:
  US 20090326997A1
• Time in Patent Office: Days
• US Class Current: 705/7.37
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 10/06375 Prediction of business process outcome or impact based on a proposed change
• CPC Class Codes: G06Q 10/06393 Score-carding, benchmarking or key performance indicator [KPI] analysis

Abstract

A set of internal processes of a business entity can be identified. At least one compliance standard can be selected. Each compliance standard can include a set of required processes for compliance. The internal processes can be programmatically compared against the set of required processes for the compliance standard. Differences between the internal processes and the required processes can be determined. A compliance cost can be estimated based at least in part upon the determined differences. An expected benefit of satisfying the compliance standard can be determined as can an expected return on investment. When compliance standards change, new compliance standards emerge, and/or business factors of the entity change, data used in previous runs can be re-used. Data concerning internal processes of the entity can be reused when determining compliance costs/benefits for a different standard.

Claims

1. A method for managing compliance with at least one compliance standard comprising:

identifying at least one internal process of an entity;

identifying at least one compliance standard, wherein each compliance standard comprises at least one required process;

programmatically comparing said at least one internal process against said at least one required processes for the compliance standard;

determining differences between said at least one internal process and said at least one required process;

estimating a compliance cost based at least in part upon the determined differences; and

ascertaining an expected benefit of satisfying the compliance standard.

2. The method of claim 1, wherein said at least one internal process comprises a plurality of internal processes of the entity, wherein said at least one compliance standard comprises a plurality of compliance standards, and wherein said at least one required process comprises a plurality of required processes.

3. The method of claim 1, further comprising:

determining an expected return on investment using a return on investment algorithm driven by the estimated compliance cost and the ascertained expected benefit.

4. The method of claim 1, further comprising:

determining a maintenance cost for processes to be performed by the entity to maintain compliance with the compliance standard; and

estimating the compliance cost based upon the determined differences, and the maintenance cost.

5. The method of claim 1, wherein the at least one compliance standard comprises a plurality of compliance standards, said method further comprising:

creating a unified report showing said at least one internal processes, said at least one required process for each of the compliance standards, and relationships among said at least one internal process and said at least one required process.

6. The method of claim 5, wherein the unified report comprises a VENN DIAGRAM showing a region for each of the compliance standards and a region for the entity, wherein said region for said entity visually depicts said at least one internal process, and each region for each compliance standard visually depicts said at least one requirement associated with that compliance standard or visually depicts an internal process corresponding to a requirement of the compliance standard, and wherein overlaps among the compliance standards and the internal processes are shown in overlapping regions of the VENN DIAGRAM.

7. The method of claim 1, wherein the at least one compliance standard comprises a plurality of compliance standards, said method further comprising:

identifying said at least one internal process and a modification to said at least one internal processes able to satisfy said at least one requirement for multiple ones of the compliance standards;

determining cost savings achieved by establishing said modification able to satisfy requirements of multiple compliance standards; and

estimating compliance costs, expected benefit, and return on investment values for compliance with discrete ones of the compliance standards and for compliance with groups of different compliance standards taking the determined cost savings into account when calculating values for the groups.

8. The method of claim 1, said method further comprising:

determining a cheapest path and a greatest return on investment for modifying said at least one internal process to conform with said compliance standards.

9. The method of claim 1, wherein the at least one compliance standard comprises a plurality of compliance standards, said method further comprising:

reusing said at least one internal process and effort taken to maintain compliance with one of the compliance standards when estimating a compliance cost, an expected benefit, and a return on investment for a different one of the compliance standards, wherein said compliance standards comprise at least two of a quality management standard, a regularity standard, an environmental standard, a safety management standard, a reporting standard, and an electronic record standard.

10. The method of claim 1, further comprising:

implementing a compliance system within a network element, which supports a plurality of different entities, said plurality of different entities comprising said entity;

maintaining currency of data for a plurality of different compliance standards within a database accessible by the compliance system; and

interfacing the compliance system with management information systems of each of the different entities to obtain entity specific information used for at least one of identifying said at least one internal process of the related entity, estimating compliance costs for the entity, ascertaining the expected benefit for the entity, and determining the expected return on investment for the entity, wherein a plurality of software implemented tools and programmatic capabilities of the compliance system are utilized to assist in identifying the plurality of internal processes, in selecting the at least one compliance standard, in programmatically comparing the internal processes against the required processes, in determining differences, in estimating the compliance cost, in ascertaining the expected benefit, and in determining the expected return on investment.

11. The method of claim 1, wherein said internal processes comprise at least one business management process, at least one operational process, and at least one support process.

12. A computer program product for managing compliance with at least one compliance standard comprising:

a computer usable medium having computer usable program code embodied therewith, the computer usable program code comprising;

computer usable program code configured to identify at least one internal process of an entity;

computer usable program code configured to identify at least one compliance standard, wherein each compliance standard comprises at least one required process;

computer usable program code configured to programmatically compare said at least one internal process against said at least one required processes for the compliance standard;

computer usable program code configured to determine differences between said at least one internal process and said at least one required process;

computer usable program code configured to estimate a compliance cost based at least in part upon the determined differences; and

computer usable program code configured to ascertain an expected benefit of satisfying the compliance standard.

13. The computer program product of claim 12, wherein said at least one internal process comprises a plurality of internal processes of the entity, wherein said at least one compliance standard comprises a plurality of compliance standards, and wherein said at least one required process comprises a plurality of required processes.

14. The computer program product of claim 12, further comprising:

computer usable program code configured to determine an expected return on investment using a return on investment algorithm driven by the estimated compliance cost and the ascertained expected benefit.

15. The computer program product of claim 12, wherein the at least one compliance standard comprises a plurality of compliance standards, said computer usable program code further comprising:

computer usable program code configured to create a unified report showing said at least one internal processes, said at least one required process for each of the compliance standards, and relationships among said at least one internal process and said at least one required process.

16. The computer program product of claim 15, wherein the unified report comprises a VENN DIAGRAM showing a region for each of the compliance standards and a region for the entity, wherein said region for said entity visually depicts said at least one internal process, and each region for each compliance standard visually depicts said at least one requirement associated with that compliance standard or visually depicts an internal process corresponding to a requirement of the compliance standard, and wherein overlaps among the compliance standards and the internal processes are shown in overlapping regions of the VENN DIAGRAM.

17. The computer program product of claim 12, wherein the at least one compliance standard comprises a plurality of compliance standards, said computer usable program code further comprising:

computer usable program code configured to identify said at least one internal process and a modification to said at least one internal processes able to satisfy said at least one requirement for multiple ones of the compliance standards;

computer usable program code configured to determine cost savings achieved by establishing said modification able to satisfy requirements of multiple compliance standards; and

computer usable program code configured to estimate compliance costs, expected benefit, and return on investment values for compliance with discrete ones of the compliance standards and for compliance with groups of different compliance standards taking the determined cost savings into account when calculating values for the groups.

18. The computer program product of claim 12, further comprising:

computer usable program code configured to implement a compliance system within a network element, which supports a plurality of different entities, said plurality of different entities comprising said entity;

computer usable program code configured to maintain currency of data for a plurality of different compliance standards within a database accessible by the compliance system; and

computer usable program code configured to interface the compliance system with management information systems of each of the different entities to obtain entity specific information used for at least one of identifying said at least one internal process of the related entity, estimating compliance costs for the entity, ascertaining the expected benefit for the entity, and determining the expected return on investment for the entity, wherein a plurality of software implemented tools and programmatic capabilities of the compliance system are utilized to assist in identifying the plurality of internal processes, in selecting the at least one compliance standard, in programmatically comparing the internal processes against the required processes, in determining differences, in estimating the compliance cost, in ascertaining the expected benefit, and in determining the expected return on investment.

19. A system for providing standard compliance support comprising:

a data store comprising data specifying compliance standard requirements for a plurality of compliance standards and specifying business process data for a plurality of business entities, wherein said business process data comprises data for at least one of a business management process, at least one operational process of the associated business entity, and at least one support process of the associated business entity, and wherein said compliance standards comprise at least two of a quality management standard, a regulatory standard, an environmental standard, a safety management standard, a reporting standard, and an electronic record standard;

programmatic instructions digitally encoded in a storage medium; and

at least one computing device communicatively linked to the data store and the storage medium, wherein said computing device is configured to execute said programmatic instructions, wherein execution of said programmatic instructions causes said computing device to compare the specified business process data for one of the business entities against a plurality of the compliance standard requirements for at least two of the compliance standards;

to determine a return on investment for ensuring the specified business processes of the business entity conform to each of the at least two compliance standards; and

to determining a cheapest path for adjusting the business processes to comply with each of the compliance standards.

20. The system of claim 19, wherein the computing device is a Web service server, wherein the programmatic instructions are instructions of a Web service provided by the Web service server to a plurality of remotely located computing devices, each of which is communicatively linked to said network.

21. The system of claim 19, wherein the execution of the programmatic instructions causes said computing device to dynamically update said compliance standard requirements as changes occur to said compliance standards, to reuse a common set and a standardized format of the business process data for a plurality of different compliance standards, and to suggest ones of the compliance standards for which an estimated return on investment is above a specified threshold even when a user associated with the business entity for which the return on investment is estimated has not explicitly specified that an analysis is to be conducted for the suggested ones of the compliance standards.

22. The system of claim 20, wherein the execution of the programmatic instructions causes said computing device to create a unified report showing the business processes for a business entity, compliance standard requirements of the at least two compliance standards, and relationships among the business processes and the compliance standard requirements.

23. The system of claim 22, wherein the unified report comprises a VENN DIAGRAM configured to show a region for each of the compliance standards and a region for the entity, wherein said region for said entity visually depicts at least one business process, and each said region for each compliance standard visually depicts at least one requirement associated with that compliance standard or visually depicts a business process corresponding to a requirement of the compliance standard, and wherein overlaps among the compliance standards and the internal processes are shown in overlapping regions of the VENN DIAGRAM.