Integrated Operational Risk Management

• US 20120004946A1
• Filed: 06/29/2011
• Published: 01/05/2012
• Est. Priority Date: 07/01/2010
• Status: Abandoned Application

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Blackwood, Kristen B., Bridgeman, Andrew M., Baltusnik, Grace
• Application Number:
  US13/171,894
• Publication Number:
  US 20120004946A1
• Time in Patent Office: Days
• US Class Current: 705/7.28
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 10/0635 Risk analysis of enterprise or organisation activities

Abstract

Systems, methods, and software are described that may be used to integrate assessments of certain types of operational risks, including forecasted emerging (future) risks, current risks, and/or historical realized risks.

Claims

1. A computer, comprising:

a processor; and

a non-transitory computer-readable medium storing computer-executable instructions for performing steps, the steps comprising;

determining a plurality of items of current risk data,

determining a plurality of items of realized risk data,

determining a plurality of items of emerging risk data, and

determining, by a computer, a single value representing operational risk based on a combination of the plurality of items of current, realized, and emerging risk data.

2. The computer of claim 1, wherein the computer-executable instructions are further for causing a representation of the determined single value to be displayed by a display device.

3. The computer of claim 1, wherein determining the single value comprises summing at least some of the items of current risk data with at least some of the items of realized risk data and at least some of the items of emerging risk data.

4. The computer of claim 1, wherein determining the single value representing operational risk further comprises:

determining a first combination of the plurality of items of current risk data;

determining a second combination of the plurality of items of realized risk data;

determining a third combination of the plurality of items of emerging risk data;

and summing together the following;

(1) the first combination multiplied by a first coefficient, (2) the second combination multiplied by a second coefficient, and (3) the third combination multiplied by a third coefficient.

5. The computer of claim 4, wherein the computer-executable instructions are further for performing regression analysis to determine the first, second, and third coefficients.

6. The computer of claim 1, wherein the computer-executable instructions are further for collecting risk data, wherein determining the plurality of items of current, realized, and emerging risk data comprises aligning the collected risk data to a plurality of libraries.

7. The computer of claim 6, wherein the computer-executable instructions are further for performing comparisons between the determined plurality of items of current and realized risk data to determine a confidence interval.

8. A method, comprising:

determining a plurality of items of current risk data;

determining a plurality of items of realized risk data;

determining a plurality of items of emerging risk data;

determining, by a computer, a single value representing operational risk based on a combination of the plurality of items of current, realized, and emerging risk data; and

causing a representation of the determined single value to be displayed by a display device.

9. The method of claim 8, wherein determining the single value comprises summing at least some of the items of current risk data with at least some of the items of realized risk data and at least some of the items of emerging risk data.

10. The method of claim 8, further comprising determining a hierarchy of risks, wherein the determined plurality of items of current, realized, and emerging risk data is based on the determined hierarchy of risks.

11. The method of claim 8, further comprising normalizing the plurality of items of current, realized, and emerging risk items of data prior to combining the items of data to determine the single value.

12. The method of claim 8, wherein the items of current risk data comprise inherent, control, and residual risk assessments.

13. The method of claim 8, wherein the items of current risk data comprise key risk indicators.

14. The method of claim 8, further comprising modifying a risk control based on the determined single value representing operational risk.

15. The method of claim 8, wherein determining the single value representing operational risk further comprises:

determining a first combination of the plurality of items of current risk data;

determining a second combination of the plurality of items of realized risk data;

determining a third combination of the plurality of items of emerging risk data;

and summing together the following;

(1) the first combination multiplied by a first coefficient, (2) the second combination multiplied by a second coefficient, and (3) the third combination multiplied by a third coefficient.

16. The method of claim 15, further comprising performing regression analysis to determine the first, second, and third coefficients.

17. The method of claim 8, further comprising collecting risk data, wherein determining the plurality of items of current, realized, and emerging risk data comprises aligning the collected risk data to a plurality of libraries.

18. The method of claim 17, further comprising performing comparisons between the determined plurality of items of current and realized risk data to determine a confidence interval.

19. A non-transitory computer-readable medium storing computer-executable instructions for performing steps, the steps comprising:

determining a plurality of items of current risk data;

determining a plurality of items of realized risk data;

determining a plurality of items of emerging risk data; and

determining, by a computer, a single value representing operational risk based on a combination of the plurality of items of current, realized, and emerging risk data.

20. The non-transitory computer-readable medium of claim 19, wherein determining the single value representing operational risk further comprises:

determining a first combination of the plurality of items of current risk data;

determining a second combination of the plurality of items of realized risk data;

determining a third combination of the plurality of items of emerging risk data;

performing regression analysis to determine first, second, and third coefficients; and

summing together the following;

(1) the first combination multiplied by the first coefficient, (2) the second combination multiplied by the second coefficient, and (3) the third combination multiplied by the third coefficient.