CHANGE CONVERGENCE RISK MAPPING

• US 20150199629A1
• Filed: 01/10/2014
• Published: 07/16/2015
• Est. Priority Date: 01/10/2014
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Faile, James W. Jr., Micek, James J., Cummings, Roxanna L., Petersen, Jodi L.
• Granted Patent: US 9,721,316 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06Q 10/0635 Risk analysis of enterprise or organisation activities
• CPC Class Codes: G06Q 10/0639 Performance analysis of employees; Performance analysis of enterprise or organisation operations
• CPC Class Codes: G06Q 50/265 Personal security, identity or safety

Abstract

Disclosed is a change convergence risk mapping system. The change convergence risk mapping system typically includes a processor, a memory, and a risk aggregation module stored in the memory. The change convergence risk mapping system is typically configured for: determining an event risk score for each of a plurality of events; aggregating the event risk scores of the plurality of events and determining a first aggregated risk score associated with a first time period; determining if the first aggregated risk score exceeds a first predefined aggregated risk score threshold or if a first predefined number of events associated with the first time period have an event risk score exceeding a first predefined event risk score threshold; determining a risk level for the first time period; and graphically presenting a first indicator to a user computing system of the risk level associated with the first time period.

Claims

1. A change convergence risk mapping system, comprising:

a processor;

a memory;

a risk aggregation module stored in the memory, executable by the processor and configured for;

receiving information associated with a plurality of events, wherein the information associated with each event includes event timing information and event risk information;

determining an event risk score for each of the plurality of events;

aggregating the event risk scores of the plurality of events and determining a first aggregated risk score associated with a first time period;

determining (i) if the first aggregated risk score exceeds a first predefined aggregated risk score threshold or (ii) if a first predefined number of events associated with the first time period have an event risk score exceeding a first predefined event risk score threshold;

determining that a first risk level is associated with the first time period if (i) the first aggregated risk score exceeds the first predefined aggregated risk score threshold or (ii) the first predefined number of events associated with the first time period have an event risk score exceeding the first predefined event risk score threshold; and

graphically presenting a first indicator to a user computing system if the first risk level is associated with the first time period.

2. The change convergence risk mapping system according to claim 1, wherein the risk aggregation module is configured for:

determining (i) if the first aggregated risk score exceeds a second predefined aggregated risk score threshold or (ii) if a second predefined number of events associated with the first time period have an event risk score exceeding a second predefined event risk score threshold;

determining that a second risk level is associated with the first time period if (i) the first risk level is not associated with the first time period and (ii) the first aggregated risk score exceeds a second predefined aggregated risk score threshold or (iii) a second predefined number of events associated with the first time period have an event risk score exceeding a second predefined event risk score threshold;

determining that a third risk level is associated with the first time period if (i) the first risk level is not associated with the first time period and (ii) the second risk level is not associated with the first time period;

graphically presenting a second indicator to the user computing system if the second risk level is associated with the first time period; and

graphically presenting a third indicator to the user computing system if the third risk level is associated with the first time period.

3. The change convergence risk mapping system according to claim 2, wherein:

the first indicator comprises a first color;

the second indicator comprises a second color; and

the third indicator comprises a third color.

4. The change convergence risk mapping system according to claim 2, wherein the risk aggregation module is configured for graphically presenting to the user computing system a calendar comprising a graphical representation of the first time period, the calendar further comprising the first indicator, second indicator, or third indicator overlaying at least a portion of the graphical representation of the first time period.

5. The change convergence risk mapping system according to claim 1, wherein

the information associated with each event includes information regarding a secondary convergence factor;

determining the first aggregated risk score associated with the first time period is based on the event risk score of events (i) associated with the first time period and (ii) having a common secondary convergence factor;

determining if the first predefined number of events associated with the first time period have an event risk score exceeding a first predefined event risk score threshold comprises determining if a first predefined number of events associated with the first time period and having a common secondary convergence factor have an event risk score exceeding a first predefined event risk score threshold; and

determining that the first risk level is associated with the first time period if the first predefined number of events associated with the first time period have an event risk score exceeding the first predefined event risk score threshold comprises determining that the first risk level is associated with the first time period if the first predefined number of events associated with the first time period and having a common secondary convergence factor have an event risk score exceeding the first predefined event risk score threshold.

6. The change convergence risk mapping system according to claim 1, wherein receiving information associated with a plurality of events comprises prompting a user to provide risk information regarding one or more events.

7. The change convergence risk mapping system according to claim 1, wherein the event risk information associated with each of the plurality of events comprises a plurality of risk factors.

8. The change convergence risk mapping system according to claim 1, wherein the plurality of events comprise one or more internal events and one or more external events.

9. A computer program product for change convergence risk mapping comprising a non-transitory computer-readable storage medium having computer-executable instructions for:

receiving information associated with a plurality of events, wherein the information associated with each event includes event timing information and event risk information;

determining an event risk score for each of the plurality of events;

aggregating the event risk scores of the plurality of events and determining a first aggregated risk score associated with a first time period;

determining (i) if the first aggregated risk score exceeds a first predefined aggregated risk score threshold or (ii) if a first predefined number of events associated with the first time period have an event risk score exceeding a first predefined event risk score threshold;

determining that a first risk level is associated with the first time period if (i) the first aggregated risk score exceeds the first predefined aggregated risk score threshold or (ii) the first predefined number of events associated with the first time period have an event risk score exceeding the first predefined event risk score threshold; and

graphically presenting a first indicator to a user computing system if the first risk level is associated with the first time period.

10. The computer program product according to claim 9, wherein the non-transitory computer-readable storage medium has computer-executable instructions for:

determining (i) if the first aggregated risk score exceeds a second predefined aggregated risk score threshold or (ii) if a second predefined number of events associated with the first time period have an event risk score exceeding a second predefined event risk score threshold;

determining that a second risk level is associated with the first time period if (i) the first risk level is not associated with the first time period and (ii) the first aggregated risk score exceeds a second predefined aggregated risk score threshold or (iii) a second predefined number of events associated with the first time period have an event risk score exceeding a second predefined event risk score threshold;

determining that a third risk level is associated with the first time period if (i) the first risk level is not associated with the first time period and (ii) the second risk level is not associated with the first time period;

graphically presenting a second indicator to the user computing system if the second risk level is associated with the first time period; and

graphically presenting a third indicator to the user computing system if the third risk level is associated with the first time period.

11. The computer program product according to claim 10, wherein:

the first indicator comprises a first color;

the second indicator comprises a second color; and

the third indicator comprises a third color.

12. The computer program product according to claim 10, wherein the non-transitory computer-readable storage medium has computer-executable instructions for graphically presenting to the user computing system a calendar comprising a graphical representation of the first time period, the calendar further comprising the first indicator, second indicator, or third indicator overlaying at least a portion of the graphical representation of the first time period.

13. The computer program product according to claim 9, wherein

the information associated with each event includes information regarding a secondary convergence factor;

determining the first aggregated risk score associated with the first time period is based on the event risk score of events (i) associated with the first time period and (ii) having a common secondary convergence factor;

determining if the first predefined number of events associated with the first time period have an event risk score exceeding a first predefined event risk score threshold comprises determining if a first predefined number of events associated with the first time period and having a common secondary convergence factor have an event risk score exceeding a first predefined event risk score threshold; and

determining that the first risk level is associated with the first time period if the first predefined number of events associated with the first time period have an event risk score exceeding the first predefined event risk score threshold comprises determining that the first risk level is associated with the first time period if the first predefined number of events associated with the first time period and having a common secondary convergence factor have an event risk score exceeding the first predefined event risk score threshold.

14. The computer program product according to claim 9, wherein receiving information associated with a plurality of events comprises prompting a user to provide risk information regarding one or more events.

15. The computer program product according to claim 9, wherein the event risk information associated with each of the plurality of events comprises a plurality of risk factors.

16. The computer program product according to claim 9, wherein the plurality of events comprise one or more internal events and one or more external events.

17. A method for change convergence risk mapping, comprising:

receiving, via a processor, information associated with a plurality of events, wherein the information associated with each event includes event timing information and event risk information;

determining, via a processor, an event risk score for each of the plurality of events;

aggregating, via a processor, the event risk scores of the plurality of events and determining a first aggregated risk score associated with a first time period;

determining, via a processor, (i) if the first aggregated risk score exceeds a first predefined aggregated risk score threshold or (ii) if a first predefined number of events associated with the first time period have an event risk score exceeding a first predefined event risk score threshold;

determining, via a processor, that a first risk level is associated with the first time period if (i) the first aggregated risk score exceeds the first predefined aggregated risk score threshold or (ii) the first predefined number of events associated with the first time period have an event risk score exceeding the first predefined event risk score threshold; and

graphically presenting, via a processor, a first indicator to a user computing system if the first risk level is associated with the first time period.

18. The method according to claim 17, comprising:

determining (i) if the first aggregated risk score exceeds a second predefined aggregated risk score threshold or (ii) if a second predefined number of events associated with the first time period have an event risk score exceeding a second predefined event risk score threshold;

determining that a second risk level is associated with the first time period if (i) the first risk level is not associated with the first time period and (ii) the first aggregated risk score exceeds a second predefined aggregated risk score threshold or (iii) a second predefined number of events associated with the first time period have an event risk score exceeding a second predefined event risk score threshold;

determining that a third risk level is associated with the first time period if (i) the first risk level is not associated with the first time period and (ii) the second risk level is not associated with the first time period;

graphically presenting a second indicator to the user computing system if the second risk level is associated with the first time period; and

graphically presenting a third indicator to the user computing system if the third risk level is associated with the first time period.

19. The method according to claim 18, wherein:

the first indicator comprises a first color;

the second indicator comprises a second color; and

the third indicator comprises a third color.

20. The method according to claim 18, comprising graphically presenting to the user computing system a calendar comprising a graphical representation of the first time period, the calendar further comprising the first indicator, second indicator, or third indicator overlaying at least a portion of the graphical representation of the first time period.

21. The method according to claim 17, wherein

the information associated with each event includes information regarding a secondary convergence factor;

determining the first aggregated risk score associated with the first time period is based on the event risk score of events (i) associated with the first time period and (ii) having a common secondary convergence factor;

determining if the first predefined number of events associated with the first time period have an event risk score exceeding a first predefined event risk score threshold comprises determining if a first predefined number of events associated with the first time period and having a common secondary convergence factor have an event risk score exceeding a first predefined event risk score threshold; and

determining that the first risk level is associated with the first time period if the first predefined number of events associated with the first time period have an event risk score exceeding the first predefined event risk score threshold comprises determining that the first risk level is associated with the first time period if the first predefined number of events associated with the first time period and having a common secondary convergence factor have an event risk score exceeding the first predefined event risk score threshold.

22. The method according to claim 17, wherein receiving information associated with a plurality of events comprises prompting a user to provide risk information regarding one or more events.

23. The method according to claim 17, wherein the event risk information associated with each of the plurality of events comprises a plurality of risk factors.

24. The method according to claim 17, wherein the plurality of events comprise one or more internal events and one or more external events.