OPERATIONAL RISK AND CONTROL ANALYSIS OF AN ORGANIZATION

• US 20140156339A1
• Filed: 12/03/2012
• Published: 06/05/2014
• Est. Priority Date: 12/03/2012
• Status: Abandoned Application

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Simpson, Richard Warren, Boyer, Carol A., Corrado, Stephen A., Pottle, Paula E., Rahimi, Nooruddin
• Application Number:
  US13/692,297
• Publication Number:
  US 20140156339A1
• Time in Patent Office: Days
• US Class Current: 705/7.28
• CPC Class Codes: G06Q 10/0635 Risk analysis of enterprise or organisation activities
• CPC Class Codes: G06Q 10/067 Enterprise or organisation modelling

Abstract

Systems and methods that facilitate operational risk and control analysis of an organization may include receiving a plurality of key risks and the plurality of key risks identify operational risks of an organization. A plurality of sets of data is received from a plurality of data providers, and the plurality of the sets of data comprise information associated with a plurality of business units in the organization. Each set of data is associated with a key risk, and the plurality of the sets of data is compiled based on the key risk. The compiled data is quantified, and quantifying the integrated data comprises weighting the compiled data according to the key risk. The quantified data is stored to facilitate risk analysis.

Claims

1. A system, comprising:

a network interface operable to;

receive a plurality of key risks, wherein the plurality of key risks identify operational risks of an organization; and

receive a plurality of sets of data from a plurality of data providers, wherein the plurality of the sets of data comprise information associated with a plurality of business units in the organization;

a processor communicatively coupled to the network interface and operable to;

associate each set of data with a key risk;

compile the plurality of the sets of data based on the key risk; and

quantify the compiled data, wherein quantifying the integrated data comprises weighting the compiled data according to the key risk; and

a memory communicatively coupled to the processor and operable to store the quantified data to facilitate risk analysis.

2. The system of claim 1, wherein the plurality of data providers comprises internal data providers and external data providers and the plurality of the sets of data comprises structured data and unstructured data.

3. The system of claim 1, wherein the plurality of the sets of data comprises data associated with the organization and data associated with a plurality of third parties and the data associated with the organization and the data associated with a plurality of third parties is categorized according to operational risk categories and the operational risk categories comprise the following categories:

fraud and criminal, human malicious external events, human non-malicious external events, natural events and disasters, third party and vendor, legal, and regulatory and governmental.

4. The system of claim 1, wherein the processor is further operable to convert the plurality of the sets of data into a standard template before associating each set of data with the key risk.

5. The system of claim 1, wherein the processor is further operable to:

facilitate quality control review of the associated set of data and the key risk; and

determine whether the associated set of data and the key risk pass the quality control review.

6. The system of claim 1, wherein the processor is further operable to generate a first report based on the integrated data, wherein the first report comprises at least one pivot table.

7. The system of claim 1, wherein the processor is further operable to:

generate a second report based on the quantified data; and

communicate the second report to a computer to facilitate additional analysis.

8. Non-transitory computer readable medium comprising logic, the logic, when executed by a processor, operable to:

receive a plurality of key risks, wherein the plurality of key risks identify operational risks of an organization;

receive a plurality of sets of data from a plurality of data providers, wherein the plurality of the sets of data comprise information associated with a plurality of business units in the organization;

associate each set of data with a key risk;

compile the plurality of the sets of data based on the key risk;

quantify the compiled data, wherein quantifying the integrated data comprises weighting the compiled data according to the key risk; and

store the quantified data to facilitate risk analysis.

9. The non-transitory computer readable medium of claim 8, wherein the plurality of data providers comprises internal data providers and external data providers and the plurality of the sets of data comprises structured data and unstructured data.

10. The non-transitory computer readable medium of claim 8, wherein the plurality of the sets of data comprises data associated with the organization and data associated with a plurality of third parties and the data associated with the organization and the data associated with a plurality of third parties is categorized according to operational risk categories and the operational risk categories comprise the following categories:

fraud and criminal, human malicious external events, human non-malicious external events, natural events and disasters, third party and vendor, legal, and regulatory and governmental.

11. The non-transitory computer readable medium of claim 8, wherein the logic is further operable to:

facilitate quality control review of the associated set of data and the key risk; and

determine whether the associated set of data and the key risk pass the quality control review.

12. The non-transitory computer readable medium of claim 8, wherein the logic is further operable to generate a first report based on the integrated data, wherein the first report comprises at least one pivot table.

13. The non-transitory computer readable medium of claim 8, wherein the logic is further operable to:

generate a second report based on the quantified data; and

communicate the second report to a computer to facilitate additional analysis.

14. A method, comprising:

receiving a plurality of key risks, wherein the plurality of key risks identify operational risks of an organization;

receiving a plurality of sets of data from a plurality of data providers, wherein the plurality of the sets of data comprise information associated with a plurality of business units in the organization;

associating, by a processor, each set of data with a key risk;

compiling the plurality of the sets of data based on the key risk;

quantifying, by the processor, the compiled data, wherein quantifying the integrated data comprises weighting the compiled data according to the key risk; and

storing the quantified data to facilitate risk analysis.

15. The method of claim 14, wherein the plurality of data providers comprises internal data providers and external data providers and the plurality of the sets of data comprises structured data and unstructured data.

16. The method of claim 14, wherein the plurality of the sets of data comprises data associated with the organization and data associated with a plurality of third parties and the data associated with the organization and the data associated with a plurality of third parties is categorized according to operational risk categories and the operational risk categories comprise the following categories:

fraud and criminal, human malicious external events, human non-malicious external events, natural events and disasters, third party and vendor, legal, and regulatory and governmental.

17. The method of claim 14, further comprising converting the plurality of the sets of data into a standard template before associating each set of data with the key risk.

18. The method of claim 14, further comprising:

facilitating quality control review of the associated set of data and the key risk; and

determining, by the processor, whether the associated set of data and the key risk pass the quality control review.

19. The method of claim 14, further comprising generating a first report based on the integrated data, wherein the first report comprises at least one pivot table.

20. The method of claim 14, further comprising:

generating a second report based on the quantified data; and

communicating the second report to a computer to facilitate additional analysis.