ASSESSING AND MANAGING RISKS OF SERVICE RELATED CHANGES BASED ON DYNAMIC CONTEXT INFORMATION

• US 20130006701A1
• Filed: 07/01/2011
• Published: 01/03/2013
• Est. Priority Date: 07/01/2011
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Guven, Sinem, Thomas, Mark A.
• Application Number:
  US13/175,275
• Publication Number:
  US 20130006701A1
• Time in Patent Office: Days
• US Class Current: 705/7.28
• CPC Class Codes: G06Q 10/0635 Risk analysis of enterprise or organisation activities

Abstract

A method of assessing and mitigating a risk of a proposed change includes entering a category of the change, filtering risk assessment questions based on the entered category of the proposed change, determining an initial risk based on a dynamic change context, determining at least one high risk factor that is associated with the initial risk, filtering mitigation risk questions based on the at least one high risk factors, and re-determining the risk from mitigation answers to the filtered mitigation risk questions.

Claims

1. A method of determining risk associated with a proposed change, the method comprising:

entering change information related to the proposed change and a category of the change;

filtering, by a processor, risk assessment questions based on the entered category of the proposed change;

asking at least one of the filtered risk assessment questions to generate first answers;

automatically inferring, by the processor, second answers of at least one of the risk assessment questions based on the entered change information and historical information; and

determining, by the processor, the risk from weights assigned to each answer.

2. The method of claim 1, wherein the historical information includes failure rates of changes that are similar to the proposed change.

3. The method of claim 1, wherein the historical information includes health statistics of an account requesting the proposed change.

4. The method of claim 3, wherein the health statistics include a number of missed service level agreements.

5. The method of claim 1, wherein the entered information includes an urgency rating of the change.

6. The method of claim 1, wherein the entered information includes a back-out plan associated with the proposed change.

7. The method of claim 1, wherein the back-out plan includes steps to restore to a valid state that was present before the proposed change was implemented.

8. The method of claim 1, wherein the entered category is linked to a series of directions and the filtering comprises:

traversing a tree using the directions to arrive at a leaf node of a change category tree; and

selecting only the risk assessment questions associated with the leaf node.

9. The method of claim 1, wherein each risk assessment question is designed to predict a probability that the proposed change will fail.

10. The method of claim 1, wherein each risk assessment question is designed to predict the impact of the proposed change failing.

11. A method of mitigating a risk associated with a proposed change, the method comprising:

determining at least one high risk factor that is associated with a determined risk of a proposed change;

filtering mitigation risk questions based on the at least one high risk factors;

asking the filtered mitigation risk questions to generate mitigation answers;

determining a reduced risk from the mitigation answers and a change context of the proposed change.

12. The method of claim 11, wherein the change context is based on answers to risk assessment questions that indicate a level of risk of the proposed change.

13. The method of claim 12, wherein the change context is further based on failure rates for changes that are similar to the proposed change.

14. The method of claim 13, wherein the change context is further based on user entered information for the proposed change.

15. The method of claim 14, wherein the change context is further based on health statistics associated with an account requesting the proposed change.

16. The method of claim 15, wherein the health statistics include a number of missed service level agreements.

17. The method of claim 11, wherein determining the risk further comprises:

proposing at least one action item to an account requesting the change; and

reducing the risk based on completion of the action item.

20. The apparatus of claim 17, wherein the memory includes a database to store the risk assessment questions and the mitigation questions.

21. The apparatus of claim 17, wherein the historical information includes failure rates associated with changes that are similar to the proposed change.

22. The apparatus of claim 17, wherein the historical information includes a number of missed service level agreements of an account.

23. The apparatus of claim 17, wherein the memory stores a change category tree, and the input category is associated with a series of directions for traversing the tree to arrive at a leaf of the tree, and the filtered assessment questions are linked to the leaf.

18. An apparatus for assessing and mitigating risk of a proposed change, the apparatus comprising:

a memory storing a computer program to assess and mitigate risk, risk assessment questions, risk mitigation questions, and historical information associated with changes; and

a processor configured to execute the computer program,

wherein the computer program is configured to prompt entry of change information related to the proposed change and a category of the change, filter the risk assessment questions based on the entered category, prompt entry of first answers to at least one of the filtered risk assessment questions, infer second answers to at least one of the filtered risk assessment questions based on the change information and historical information, determine a risk based on the first and second answers, and mitigate the risk based on the risk mitigation questions.

19. The apparatus of claim 18, wherein the computer program mitigates the risk by determining high risk factors associated with the proposed change, filtering the mitigation questions based on the determined high risk factors, prompting for mitigation answers to the filtered mitigation questions, prompting for actions as determined by the filtered mitigation questions and re-determining the risk based on the actions taken and the mitigation answers, which define the change context dynamically.

24. A method of assessing and mitigating a risk of a proposed change, the method comprising:

entering a category of the change;

filtering, by a processor, risk assessment questions based on the entered category of the proposed change;

determining, by the processor, an initial risk based on answers to the filtered questions;

determining at least one high risk factor that is associated with the initial risk;

filtering mitigation risk questions based on the at least one high risk factors; and

re-determining, by the processor, the risk from mitigation answers to the filtered mitigation risk questions.

25. The method of claim 24, wherein the answers include at least one answer that is received directly from an account and at least one answer that is inferred from historical information associated with changes that are similar to the proposed change.