ENTERPRISE RISK ANALYSIS SYSTEM

• US 20110282710A1
• Filed: 05/14/2010
• Published: 11/17/2011
• Est. Priority Date: 05/14/2010
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation, Walkway Technologies Us LLC
• Original Assignee: International Business Machines Corporation
• Inventors: Prasad, Priya, Debroy, Indrajit, Suseelan, Rajesh, Mantripragada, Nagesh K., Akkiraju, Rama K.T., Srivastava, Manisha, Torok, Robert G., Senapati, Pritish C., Nayak, Nitinchandra R., von Kaenel, Juerg, Goh, Sweefen
• Application Number:
  US12/780,413
• Publication Number:
  US 20110282710A1
• Time in Patent Office: Days
• US Class Current: 705/7.28
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 10/0635 Risk analysis of enterprise or organisation activities
• CPC Class Codes: G06Q 10/103 Workflow collaboration or project management

Abstract

A system for analyzing enterprise risks is provided and includes a first subsystem to permit creation of enterprise risk management (ERM) templates and modification thereof into instances of searchable and retrievable ERM content, a second subsystem to permit visualization and editing of the ERM content, a plurality of integrated analysis tools and an ERM work product generator supported by the first and second subsystems to produce ERM analytical results and ERM work product based on the ERM content and a platform.

Claims

1. A system for analyzing enterprise risks, the system comprising:

a first subsystem to permit creation of enterprise risk management (ERM) templates and population thereof into instances of searchable and retrievable ERM content;

a second subsystem to permit visualization and editing of the ERM content;

a plurality of integrated analysis tools and an ERM work product generator supported by the first subsystem for operation with the second subsystem to produce ERM analytical results and ERM work product based on the ERM content; and

a platform by which the first and second subsystems, the plurality of integrated analysis tools and the ERM work product generator are accessible to authorized users.

2. The system according to claim 1, wherein the first and second subsystems comprise a semantic platform model to capture and represent the ERM content.

3. The system according to claim 1, wherein the ERM content comprises ERM capability derived from responses to a distributed survey, measured on an ERM capability maturity scale and visualized in a context of a business criticality model.

4. The system according to claim 1, wherein the first subsystem comprises first and second repositories for storing the ERM template and the ERM content, respectively, which host structured and unstructured content organized for search and visual analysis.

5. The system according to claim 1, wherein the ERM content contains a plurality of attributes including rich content and is searchable by keyword searches and/or filtered searches.

6. The system according to claim 1, wherein the second subsystem permits specification of a scope on ERM content for visualization using a predefined risk taxonomy, wherein any ERM entity can be classified along multiple dimensions simultaneously.

7. The system according to claim 1, wherein at least one of the ERM analytical results and the ERM work product comprises user specified views on ERM content displayed as a semantic platform.

8. The system according to claim 1, wherein the first subsystem supports contextual collaboration features including discussion forums, tagging, rating and e-mail that allows multiple users to collaborate in the creation, visualization and analysis of risks.

9. The system according to claim 1, wherein at least one of the ERM analytical results and the ERM work product presents an editable risk prioritization map that can prioritize the risks based on a likelihood of occurrence and a potential impact.

10. The system according to claim 1, wherein the plurality of analysis tools comprises an automatic recommender module to suggest suitable risk response solutions to mitigate the prioritized risk.

11. The system according to claim 1, wherein the plurality of analysis tools comprises a risk exposure estimation tool using a plurality of techniques including interviews with risk owners, preference elicitation and multi-criteria decision making approaches.

12. The system according to claim 1, wherein the plurality of analysis tools comprises a tool to automatically identify various shortfalls including organizational shortfalls in dealing with risks, shortfalls in managing risk response programs and in identifying risk root causes.

13. The system according to claim 1, wherein the plurality of analysis tools comprises a tool to automatically display the risk reduction potential of each risk control, sort the set of risk controls in descending order of its overall risk reduction potential, and display the impact on the user-specified budget of implementing each risk control.

14. The system according to claim 1, wherein the ERM content is ranked based on queries to answer business related issues.

15. The system according to claim 1, wherein a repository maintains a historic record of risk response solutions and associated risks.

16. A system for analyzing enterprise risks, the system comprising:

a first subsystem, including an enterprise risk management (ERM) model designer to permit modeling of an ERM template including relationships thereof with other ERM templates, an ERM content editor to permit population of the ERM template into an instance of searchable and retrievable ERM content, an ERM model search module to permit searching of the ERM content and an ERM contextual collaboration platform to permit collaboration of ERM content editing;

a second subsystem to permit visualization of the ERM content;

a plurality of integrated analysis tools and an ERM work product generator supported by the first subsystem for operation with the second subsystem to produce ERM analytical results and ERM work product based on the ERM content; and

a platform by which the first and second subsystems, the plurality of integrated analysis tools and the ERM work product generator are accessible to authorized users.

17. The system according to claim 16, wherein the first and second subsystems comprise a semantic platform model to capture and represent the ERM content.

18. The system according to claim 16, wherein the ERM content comprises ERM capability derived from responses to a distributed survey, measured on an ERM capability maturity scale and visualized in a context of a business criticality model

19. A computer-readable medium having a set of executable instructions stored thereon to cause a microprocessor of a computing device to implement a method for analyzing enterprise risks, the method comprising:

modeling an enterprise risk management (ERM) template;

populating the ERM template into an instance of searchable and retrievable ERM content;

collaborating in the context of specific ERM content

visualizing and editing the risk-related enterprise information;

producing ERM analytical results and ERM work product based on the ERM content; and

providing via a platform authorized users with read/write access to the ERM template, the ERM content, the analytical results and the ERM work product.

20. The computer-readable medium according to claim 19, wherein the producing ERM analytical results comprises producing an ERM capability assessment with improvement program recommendations.