Automated governance of data applications

• US 9,465,778 B1
• Filed: 09/11/2014
• Issued: 10/11/2016
• Est. Priority Date: 09/11/2014
• Status: Active Grant

• Current Assignee: State Farm Mutual Automobile Insurance Company (State Farm)
• Original Assignee: State Farm Mutual Automobile Insurance Company (State Farm)
• Inventors: DeBo, Gregory James, Reiff, Randy, Sheley, Mary Jane, Pillai, Vaidya Balasubramanian
• Primary Examiner(s): BROWN, SHEREE N
• Application Number:
  US14/483,553
• Time in Patent Office: 761 Days
• Field of Search: 707/694
• US Class Current: 1/1
• CPC Class Codes: G06F 11/30 Monitoring
• CPC Class Codes: G06F 11/3034 where the computing system component is a storage system, e.g. DASD based or network based digital input from or digital output to record carriers G06F3/06; digital recording or reproducing G11B20/18; for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS], H04L67/1097
• CPC Class Codes: G06F 11/3409 for performance assessment
• CPC Class Codes: G06F 16/21 Design, administration or maintenance of databases
• CPC Class Codes: G06Q 10/063 Operations research, analysis or management

Abstract

A method for regulating a plurality of collections of data includes analyzing collections of data to identify one or more deviations from a standard, guideline, or best practice governing the plurality of collections of data. The method further includes determining characteristics of the one or more deviations. Based on the characteristics, an action to be taken in response to the one or more deviations is determined and completed. Further, a record of the executed action is stored on a computer-readable medium.

Claims

1. A computer-implemented method for regulating collections of data, the computer-implemented method comprising:

for each of a plurality of collections of data;

analyzing, by one or more processors executing a plurality of deviation detection scripts, the collection of data to identify one or more deviations corresponding to ways in which the collection of data deviates from a standard governing the plurality of collections of data, wherein analyzing the collection of data to identify one or more deviations includes at least one of (i) detecting that an amount of data associated with a table space in the collection of data surpasses a threshold, (ii) detecting that data within the collection of data lacks an image copy, or (iii) detecting that data within the collection of data is associated with an outdated image copy;

automatically determining, by the one or more processors, a characteristic of the one or more deviations indicating at least one of;

(i) a similarity of the one or more deviations to a past deviation of the collection of data from the standard governing the plurality of collections of data,

(ii) a consequence of altering the collection of data to correct the one or more deviations, or

(iii) a threat level corresponding to the one or more deviations;

based on the characteristic of the one or more deviations, automatically determining, by the one or more processors, an action in response to the one or more deviations;

executing, by the one or more processors, the action in response to the one or more deviations; and

generating, by the one or more processors, a record of the executed action, the record stored on a non-transitory computer-readable medium.

2. The computer-implemented method of claim 1, wherein automatically determining the characteristic of the one or more deviations includes determining the characteristic of the one or more deviations indicating at least two of:

(i) a similarity of the one or more deviations to a past deviation of the collection of data from the standard governing the plurality of collections of data,

(ii) a consequence of altering the collection of data to correct the one or more deviations, or

(iii) a threat level corresponding to the one or more deviations.

3. The computer-implemented method of claim 1, wherein automatically determining the action in response to the one or more deviations includes determining to automatically alter the collection of data such that the collection of data complies with the standard governing the plurality of collections of data.

4. The computer-implemented method of claim 1, wherein automatically determining the action in response to the one or more deviations includes determining to automatically notify one or more of a plurality of data administrators responsible for the collection of data about the one or more deviations.

5. The computer-implemented method of claim 1, wherein automatically determining the action in response to the one or more deviations includes determining that an incident should be generated corresponding to the collection of data.

6. The computer-implemented method of claim 5, wherein automatically determining the action in response to the one or more deviations includes determining that the incident should be escalated based on a plurality of previously generated incidents corresponding to the collection of data.

7. The computer-implemented method of claim 1, wherein the plurality of collections of data is a first plurality of collections of data, the method further comprising:

determining, by the one or more processors, the first plurality of collections of data and a second plurality of collections of data,

wherein the second plurality of collections of data are excluded from a detection of deviations from the standard governing the plurality of collections of data based on stored exclusions corresponding to the second plurality of collections of data, and

wherein the first plurality of collections of data is included in the detection of deviations from the standard governing the plurality of collections of data.

8. The computer-implemented method of claim 1, wherein the plurality of data collections is a first plurality of data collections, the method further comprising:

determining, by the one or more processors, the first plurality of data collections from a second plurality of data collections based on an activation of a deviation detection for only the first plurality of data collections, wherein the second plurality of data collections includes the first plurality of data collections and other data collections.

9. The computer-implemented method of claim 8, wherein the first plurality of data collections are stored on first data storage devices at a first physical location, wherein the other data collections are stored on a second data storage device at a second physical location different from the first physical location, and wherein the activation of the deviation detection activates the deviation detection for only the first plurality of data collections stored on the first data storage devices at the first physical location.

10. The computer-implemented method of claim 1, wherein automatically determining the action in response to the one or more deviations includes selecting the action from a set of pre-defined actions.

11. The computer-implemented method of claim 10, wherein selecting the action from the set of pre-defined actions includes:

identifying a subset of activated actions from the set of pre-defined actions, and

selecting one of the subset of activated actions.

12. A computer-implemented method for regulating a collection of data administered by one or more data administrators, the computer-implemented method comprising:

receiving, via the computer network, a request for exclusion of a first portion of the collection of data from regulatory actions, the first portion of the collection of data being different than a second portion of the collection of data;

based on the received request, determining, by the one or more processors, that the first portion of the collection of data is eligible to be excluded from the regulatory actions and the second portion of the collection of data is subject to the regulatory actions;

for the second portion of the collection of data;

analyzing, by one or more processors executing a plurality of deviation detection scripts, the second portion of the collection of data to identify one or more deviations corresponding to ways in which the second portion of the collection of data deviates from a standard governing a plurality of collections of data, wherein analyzing the second portion of the collection of data to identify one or more deviations includes at least one of (i) detecting that an amount of data associated with a table space in the second portion of the collection of data surpasses a threshold, (ii) detecting that data within the second portion of the collection of data lacks an image copy, or (iii) detecting that data within the second portion of the collection of data is associated with an outdated image copy;

automatically determining, by the one or more processors, a characteristic of the one or more deviations indicating at least one of;

(i) a similarity of the one or more deviations to a past deviation of the second portion of the collection of data from the standard governing the plurality of collections of data,

(ii) a consequence of altering the second portion of the collection of data to correct the one or more deviations, or

(iii) a threat level corresponding to the one or more deviations;

based on the characteristic of the one or more deviations, automatically determining, by the one or more processors, an action in response to the one or more deviations; and

executing, by the one or more processors, the action in response to the one or more deviations.

13. The computer-implemented method of claim 12, further comprising:

generating, by the one or more processors, exclusion data indicating that the first portion of the collection of data is excluded from the regulatory actions for a specific length of time.

14. The computer-implemented method of claim 13, further comprising notifying, via the computer network, the one or more data administrators that the first portion of the collection of data is excluded from the regulatory actions for the specific length of time.

15. The computer-implemented method of claim 12, further comprising:

receiving, via the computer network, a second request for exclusion of the second portion of the collection of data from the regulatory actions,

wherein determining that the second portion of the collection of data is subject to the regulatory actions includes determining that the second request is invalid.

16. The computer-implemented method of claim 15, wherein the second request is received from a particular one of the one or more data administrators, and wherein determining that the second request is invalid includes determining that the second request is invalid based on a security profile associated with the particular one of the one or more data administrators.

17. The computer-implemented method of claim 12, wherein the determined action includes generating an incident report based on the one or more deviations for presentation to at least one of managers or supervisors of the one or more data administrators.

18. The computer-implemented method of claim 12, wherein the determined action includes notifying the one or more data administrators about the one or more deviations with an email notification.

19. A system comprising:

one or more processors; and

a first non-transitory computer-readable medium storing instructions thereon that, when executed by the one or more processors, cause the system to;

for each of a plurality of collections of data;

analyze the collection of data using a plurality of deviation detection scripts to identify one or more deviations corresponding to ways in which the collection of data deviates from a standard governing the plurality of collections of data, at least by one or more of (i) detecting that an amount of data associated with a table space in the collection of data surpasses a threshold, (ii) detecting that data within the collection of data lacks an image copy, or (iii) detecting that data within the collection of data is associated with an outdated image copy,

determine a characteristic of the one or more deviations indicating at least one of;

(i) a similarity of the one or more deviations to a past deviation of the collection of data from the standard governing the plurality of collections of data,

(ii) a consequence of altering the collection of data to correct the one or more deviations, or

(iii) a threat level corresponding to the one or more deviations;

based on the characteristic of the one or more deviations, determine an action in response to the one or more deviations;

complete the action in response to the one or more deviations; and

generate a record of the executed action, the record stored on a second non-transitory computer-readable medium.

20. The system of claim 19, wherein, for at least some of the plurality of collection of data, the action includes at least two or more of

(i) notifying one or more data administrators responsible for the collection of data about the one or more deviations,

(ii) generating an incident report corresponding to the one or more deviations, or

(iii) automatically altering the collection of data such that the collection of data complies with the standard governing the plurality of collections of data.