Policy Adherence And Compliance Model

• US 20110145885A1
• Filed: 12/10/2009
• Published: 06/16/2011
• Est. Priority Date: 12/10/2009
• Status: Abandoned Application

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Afriyie, Joyce, Rivers, Angela Smith
• Application Number:
  US12/635,291
• Publication Number:
  US 20110145885A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 10/067 Enterprise or organisation modelling
• CPC Class Codes: G06Q 10/10 Office automation; Time management

Abstract

Methods, computer readable media, and apparatuses for policy development and management are presented. Input corresponding to an implemented policy may be received. An adherence rating for the implemented policy may be determined based on a measured level of compliance with at least one guiding principle. An effectiveness rating for the implemented policy may be determined based on a determined level of responsiveness. Subsequently, a report may be generated.

Claims

1. A method, comprising:

receiving, at a computer, input corresponding to a first policy;

determining, on the computer, based on a measured level of compliance with at least one guiding principle, an adherence rating for the first policy;

determining, on the computer, based on a determined level of responsiveness for the first policy, an effectiveness rating for the first policy;

generating, on the computer, a report, the report including the adherence rating and the effectiveness rating for the first policy.

2. The method of claim 1, wherein receiving input includes receiving stored information from at least one external database.

3. The method of claim 1, wherein determining an adherence rating for the first policy is further based on a determined level of relative importance of the at least one guiding principle.

4. The method of claim 1, wherein determining an effectiveness rating for the first policy is further based on a determined level of business operational impact for the first policy.

5. The method of claim 1, wherein determining an effectiveness rating for the first policy is further based on a determined level of compliance with at least one legal rule relevant to the first policy.

6. The method of claim 1, wherein the determined level of responsiveness is based on at least one policy exception applicable to the first policy.

7. The method of claim 4, wherein the determined level of business operational impact is based on whether the first policy is providing at least one expected benefit.

8. The method of claim 1,

wherein the report includes a weighted adherence score and a weighted effectiveness score for the first policy,

wherein the weighted adherence score is based on the measured level of compliance with the at least one guiding principle and a determined level of relative importance of the at least one guiding principle, and

wherein the weighted effectiveness score is based on the determined level of responsiveness for the first policy, a determined level of business operational impact for the first policy, and a determined level of compliance with at least one legal rule relevant to the first policy.

9. One or more computer-readable media having computer-executable instructions stored thereon, that when executed by one or more computers, cause the one or more computers to perform:

receiving input corresponding to a first policy;

determining, based on a measured level of compliance with at least one guiding principle, an adherence rating for the first policy;

determining, based on a determined level of responsiveness for the first policy, an effectiveness rating for the first policy;

generating a report, the report including the adherence rating and the effectiveness rating for the first policy.

10. The computer-readable media of claim 9, wherein receiving input includes receiving stored information from at least one external database.

11. The computer-readable media of claim 9, wherein determining an adherence rating for the first policy is further based on a determined level of relative importance of the at least one guiding principle.

12. The computer-readable media of claim 9, wherein determining an effectiveness rating for the first policy is further based on a determined level of business operational impact for the first policy.

13. The computer-readable media of claim 9, wherein determining an effectiveness rating for the first policy is further based on a determined level of compliance with at least one legal rule relevant to the first policy.

14. The computer-readable media of claim 9, wherein the determined level of responsiveness is based on at least one policy exception applicable to the first policy.

15. The computer-readable media of claim 12, wherein the determined level of business operational impact is based on whether the first policy is providing at least one expected benefit.

16. The computer-readable media of claim 9,

wherein the report includes a weighted adherence score and a weighted effectiveness score for the first policy,

wherein the weighted adherence score is based on the measured level of compliance with the at least one guiding principle and a determined level of relative importance of the at least one guiding principle, and

wherein the weighted effectiveness score is based on the determined level of responsiveness for the first policy, a determined level of business operational impact for the first policy, and a determined level of compliance with at least one legal rule relevant to the first policy.

17. An apparatus, comprising:

a processor; and

memory storing computer-readable instructions that, when executed by the processor, cause the apparatus to perform;

receiving input corresponding to a first policy;

determining, based on a measured level of compliance with at least one guiding principle, an adherence rating for the first policy;

determining, based on a determined level of responsiveness for the first policy, an effectiveness rating for the first policy;

generating a report, the report including the adherence rating and the effectiveness rating for the first policy.

18. The apparatus of claim 17, wherein receiving input includes receiving stored information from at least one external database.

19. The apparatus of claim 17, wherein determining an adherence rating for the first policy is further based on a determined level of relative importance of the at least one guiding principle.

20. The apparatus of claim 17, wherein determining an effectiveness rating for the first policy is further based on a determined level of business operational impact for the first policy.

21. The apparatus of claim 17, wherein determining an effectiveness rating for the first policy is further based on a determined level of compliance with at least one legal rule relevant to the first policy.

22. The apparatus of claim 17, wherein the determined level of responsiveness is based on at least one policy exception applicable to the first policy.

23. The apparatus of claim 20, wherein the determined level of business operational impact is based on whether the first policy is providing at least one expected benefit.

24. The apparatus of claim 17,

wherein the report includes a weighted adherence score and a weighted effectiveness score for the first policy,

wherein the weighted adherence score is based on the measured level of compliance with the at least one guiding principle and a determined level of relative importance of the at least one guiding principle, and

wherein the weighted effectiveness score is based on the determined level of responsiveness for the first policy, a determined level of business operational impact for the first policy, and a determined level of compliance with at least one legal rule relevant to the first policy.