Non-determinative risk simulation

• US 7,747,494 B1
• Filed: 05/24/2006
• Issued: 06/29/2010
• Est. Priority Date: 05/24/2006
• Status: Active Grant

• Current Assignee: Resolver Inc.
• Original Assignee: Agilence Incorporated
• Inventors: Soung, Yuh-Wen, Kothari, Pravin, Wang, Zhangmin
• Primary Examiner(s): Trammell; James P
• Assistant Examiner(s): Tran; Hai
• Application Number:
  US11/439,771
• Time in Patent Office: 1,497 Days
• Field of Search: 705 35- 44, 700/90, 708/100
• US Class Current: 705/35
• CPC Class Codes: G06Q 10/04 Forecasting or optimisation specially adapted for administrative or management purposes, e.g. linear programming or "cutting stock problem" market predictions or forecasting for commercial activities G06Q30/0202
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/03 Credit; Loans; Processing thereof
• CPC Class Codes: G06Q 40/08 Insurance

Abstract

Simulating risk circumstances can reveal new information to risk assessment personnel about how to mitigate risk. In one embodiment, the present invention includes selecting an asset from a plurality of heterogeneous assets of a business enterprise. The user can then input a plurality of simulated risk factors for the selected asset into the system which receives this input. The risk assessment system can then generate a non-determinative simulated risk score using the simulated risk factors, the simulated risk score being a simulated measure of risk associated with the selected asset if the selected asset were to be associated with the plurality of simulated risk factors.

Claims

1. A computer implemented method of assessing risk associated with one or more assets for a business enterprise by comparing a non-determinative real risk score with a non-determinative simulated risk score, comprising the steps of:

providing a compliance management system on one or more computers, wherein said one or more computers are connected to a network of said assets for allowing said compliance management system to access said network;

selecting an asset from said assets using the compliance management system;

providing a non-linear statistical data model, wherein said non-linear statistical data model is self-trainable using a feedback mechanism;

generating said non-determinative real risk score using the non-linear statistical data model by a risk analysis engine associated with the compliance management system, further comprising;

collecting one or more risk factors associated with said selected asset;

mapping the risk factors to risk factor values;

generating said non-determinative real risk score for the asset by providing said risk factor values to said non-linear statistical data model, the non-determinative real risk score being a measure of risk associated with the selected asset;

generating said non-determinative simulated risk score using the non-linear statistical data model by said risk analysis engine, comprising;

collecting one or more simulated risk factors associated with the selected asset, wherein the simulated risk factors further comprise one or more of simulated risk factors received by a risk simulation module and risk factors configured by a user using a user interface;

mapping said simulated risk factors to simulated asset risk values;

generating said non-determinative simulated risk score using said simulated asset risk values, wherein the non-determinative simulated risk score is a simulated measure of risk associated with the selected asset if the selected asset were to be associated with the simulated risk factors; and

,

assessing said risk of the selected asset using the compliance management system, wherein said step of assessing the risk comprises comparing the non-determinative real risk score with the non-determinative simulated risk score by one or more of the compliance management system and said user of the compliance management system using said user interface;

whereby assessing the risk of the selected asset by comparing the non-determinative real risk score with the non-determinative simulated risk score enables the user to manage risk and compliancy of the assets of said business enterprise.

2. The method of claim 1, wherein the non-linear statistical data model comprises a neural network, and wherein the neural network comprises a Bayesian network, a decision tree, and a genetic algorithm.

3. A graphical user interface on a computer system for assessing risk associated with a plurality of heterogeneous assets of a business enterprise, the graphical user interface comprising:

a graphical tool to allow a user to select an asset from said plurality of heterogeneous assets on said computer system;

a display unit that displays a plurality of real risk factors associated with the asset;

said display unit that displays a real risk score associated with the asset, the real risk score being a measure of risk associated with the asset;

an input area to allow a user to input a plurality of simulated risk factors for the asset using an input device of the computer system; and

said display unit that displays a non-determinative simulated risk score associated with the asset, the simulated risk score being a simulated measure of risk associated with the asset if the selected asset were to be associated with the plurality of simulated risk factors.

4. The graphical user interface of claim 3, wherein the input area comprises a plurality of input boxes displaying the plurality of real risk factors that allow the user to alter one or more of the plurality of real risk factors by replacing it with one or more simulated risk factors.

5. The graphical user interface of claim 4, wherein simulated risk factors are displayed in a color different from real risk factors.

6. The graphical user interface of claim 4, further comprising a tool to reset the plurality of simulated risk factors to the plurality of real risk factors.

7. The graphical user interface of claim 3, wherein the simulated risk score is determined by providing the simulated risk factors to a non-linear statistical data model.

8. An apparatus for assessing risk associated with one or more assets comprising:

a processor connected to a network of said assets for allowing said apparatus to access said network, said processor comprising;

an asset module stored on the apparatus to collect information about an asset selected from a plurality of heterogeneous assets of a business enterprise;

a risk assessment module stored on the apparatus to determine a plurality of risk factors from the collected information;

a risk simulation module stored on the apparatus to receive a plurality of simulated risk factors associated with the selected asset; and

a risk analysis engine stored on the apparatus to generate a non-determinative simulated risk score using the simulated risk factors, the simulated risk score being a simulated measure of risk associated with the selected asset if the selected asset were to be associated with the plurality of simulated risk factors.

9. The apparatus of claim 8, wherein the risk analysis engine generates the non-determinative simulated risk score by providing the plurality of simulated risk factors to a non-linear statistical data model.

10. The apparatus of claim 9, wherein the non-linear statistical data model comprises a neural network.

11. The apparatus of claim 8, wherein the risk analysis engine determines a risk score for the asset by providing the plurality of risk factors to a non-linear statistical data model, the risk score being a measure of risk associated with the selected asset;

and the risk simulation module displays the risk score and the simulated risk score to a user for comparison.

12. A machine-readable medium having stored thereon data representing instructions that, when executed by a processor of a risk management system, cause the processor to perform operations comprising:

selecting an asset from a plurality of heterogeneous assets of a business enterprise;

receiving a plurality of simulated risk factors associated with the selected asset; and

generating a non-determinative simulated risk score using the simulated risk factors, the simulated risk score being a simulated measure of risk associated with the selected asset if the selected asset were to be associated with the plurality of simulated risk factors.

13. The machine-readable medium of claim 12, wherein generating the non-determinative simulated risk score comprises providing the plurality of simulated risk factors to a non-linear statistical data model.

14. The machine-readable medium of claim 13, wherein the non-linear statistical data model comprises a neural network.

15. The machine-readable medium of claim 12, further the instructions further cause the processor to perform operations comprising:

collecting a plurality of risk factors associated with the selected asset;

determining a risk score for the asset by providing the plurality of risk factors to a non-linear statistical data model, the risk score being a measure of risk associated with the selected asset; and

displaying the risk score and the simulated risk score to a user for comparison.

16. A computer implemented method of assessing risk associated with an asset in a business enterprise by comparing a non-determinative real risk score with a non-determinative simulated risk score, comprising the steps of:

providing a compliance management system on one or more computers, wherein said one or more computers are connected to a network of assets for allowing said compliance management system to access said network;

receiving said asset using said compliance management system;

associating one or more policies with the asset using the compliance management system;

calculating a compliance score for the asset based on said associated policies;

generating said non-determinative real risk score for the asset by a risk analysis engine based on said calculated compliance score using one or more non-linear statistical data models, wherein said non-linear statistical data models are self trainable using a feedback mechanism;

generating said non-determinative simulated risk score for the asset by said risk analysis engine based on the calculated compliance score using said non-linear statistical data models; and

comparing said determined non-determinative real risk score with said determined non-determinative simulated risk score by the compliance management system;

whereby the risk is assessed for the asset to manage risk and compliancy of the asset.

17. The method of claim 16, wherein said compliance score is a measure of compliance of the asset with the policies enforced by the compliance management system.

18. The method of claim 16, wherein the non-linear statistical data models comprises a neural network.

19. A computer implemented system for assessing risk associated with an asset in a business enterprise, comprising:

a compliance management system implemented on one or more computers, said one or more computers connected to a network of assets for allowing said compliance management system to access said network, said compliance management system comprising;

an asset module stored on said one or more computers for receiving said asset;

a policy module stored on said one or more computers for associating one or more policies with the asset and for calculating a compliance score for the asset based on said associated policies;

a risk management module stored on said one or more computers for determining a non-determinative real risk score for the asset based on said calculated compliance score using a non-linear statistical data models and for determining a non-determinative simulated risk score for the asset based on the calculated compliance score using said non-linear statistical data models; and

a user interface on said one or more computers for comparing said determined non-determinative real score with said determined non-determinative simulated risk score.

20. The computer implemented system of claim 19, wherein said compliance management system comprises a self-assessment module for maintaining and accessing a plurality of self-assessment surveys.

21. The computer implemented system of claim 20, wherein said user interface comprises a notification module for sending alerts and reports regarding compliance management and risk analysis.

22. A computer implemented method of assessing risk associated with one or more assets for a business enterprise by comparing a non-determinative real risk score with a non-determinative simulated risk score, comprising the steps of:

providing a compliance management system on one or more computers, wherein said one or more computers are connected to a network of said assets for allowing said compliance management system to access said network;

selecting an asset from said assets using the compliance management system;

providing a non-linear statistical data model, wherein said non-linear statistical data model is self-trainable using a feedback mechanism;

generating said non-determinative real risk score using the non-linear statistical data model;

generating said non-determinative simulated risk score using the non-linear statistical data model; and

,

assessing said risk of the selected asset using the compliance management system, wherein said step of assessing the risk comprises comparing the non-determinative real risk score with the non-determinative simulated risk score by one or more of the compliance management system and said user of the compliance management system using a user interface;

whereby assessing the risk of the selected asset by comparing the non-determinative real risk score with the non-determinative simulated risk score enables the user to manage risk and compliancy of the assets of said business enterprise.