Risk assessment method and device for data acquisition based on mobile client

Abstract

The invention provides a risk assessment method and device for data acquisition based on a mobile client, and relates to the technical field of data processing, and the method comprises the steps: obtaining a target risk assessment category and at least one target risk assessment object corresponding to a risk assessment instruction in response to the risk assessment instruction; obtaining risk assessment data matched with the target risk assessment category to generate a risk assessment questionnaire; sending the risk assessment questionnaire to a corresponding target server through the target message interface; a risk assessment questionnaire feedback result sent by the target server is received through the target message interface; and obtaining a risk assessment questionnaire feedback result from the target server, determining a risk assessment result of the target risk assessment category based on all the obtained risk assessment questionnaire feedback results, and displaying the risk assessment result through a specified display device. The data processing efficiency of risk assessment is effectively improved.

Description

Technical Field

[0001] The present application relates to the field of data processing technology, and in particular to a risk assessment method for data collection based on a mobile client, a risk assessment device for data collection based on a mobile client, a computer-readable storage medium and a terminal device. Background Art

[0002] The SAP system is an enterprise resource management software system. At present, the standard risk assessment function of the SAP system is to generate a survey questionnaire in the form of an Adobe interactive form, push it to the surveyed personnel via email, and the surveyed personnel use the Adobe PDF Reader tool to fill it out and submit it. However, this function has the following limitations: the surveyed personnel are required to have a stable office environment (laptop or desktop computer, and access to the corporate intranet); Adobe PDF Reader must be used; at the same time, the existing risk assessment relies on manual risk assessment of the surveyed personnel's questionnaire feedback. The existing risk assessment has the problems of large data transmission limitations and low data processing efficiency. Summary of the invention

[0003] The purpose of the embodiments of the present application is to provide a risk assessment method based on data collection for a mobile client, a risk assessment device based on data collection for a mobile client, a computer-readable storage medium and a terminal device to solve the above-mentioned problems.

[0004] In order to achieve the above-mentioned purpose, the first aspect of the present application provides a risk assessment method for data collection based on a mobile client, comprising:

[0005] In response to a risk assessment instruction, obtaining a target risk assessment category and at least one target risk assessment object corresponding to the risk assessment instruction;

[0006] Acquire risk assessment data matching the target risk assessment category from a pre-configured risk assessment database, and generate a risk assessment questionnaire based on the acquired risk assessment data;

[0007] calling a target message interface that matches the target risk assessment object, and sending the risk assessment questionnaire to a target server corresponding to the target risk assessment object through the target message interface; and

[0008] Receiving the risk assessment questionnaire feedback result sent by the target server through the target message interface, wherein the risk assessment questionnaire feedback result is transmitted to the target server through the corresponding mobile client after the target risk assessment subject provides feedback on the risk assessment questionnaire;

[0009] A risk assessment questionnaire feedback result is obtained from the target server, a risk assessment result for the target risk assessment category is determined based on all the obtained risk assessment questionnaire feedback results, and the risk assessment result is displayed through a designated display device.

[0010] Optionally, the risk assessment database includes at least different risk assessment data corresponding to different risk assessment categories, wherein the risk assessment data includes risk assessment questions; generating a risk assessment questionnaire based on the acquired risk assessment data includes:

[0011] Establishing a risk assessment questionnaire configuration table according to the target risk assessment category, the risk assessment questionnaire configuration table at least includes the task ID corresponding to the risk assessment instruction, the risk assessment questionnaire category ID, the risk assessment questionnaire standard ID, the maximum number of options for the risk assessment question, and the minimum number of options for the risk assessment question;

[0012] A number of risk assessment questions matching the target risk assessment category are obtained from the risk assessment database, and a risk assessment questionnaire is generated based on the obtained risk assessment questions and the risk assessment questionnaire configuration table.

[0013] Optionally, a plurality of risk assessment questions matching the target risk assessment category are obtained from the risk assessment database, including:

[0014] Randomly obtain a number of risk assessment questions matching the target risk assessment category from the risk assessment database; or

[0015] Obtain the number of times all risk assessment questions matching the target risk assessment category in the risk assessment database are acquired within a preset time period, calculate the average number of times all matched risk assessment questions are acquired within the preset time period, establish a first question set with risk assessment questions acquired a number of times higher than the average number, establish a second question set with risk assessment questions acquired a number of times not higher than the average number, sort the risk assessment questions in the first question set from high to low according to the number of times the risk assessment questions are acquired to obtain a first ranking, and sort the risk assessment questions in the second question set from low to high according to the number of times the risk assessment questions are acquired to obtain a second ranking, and cross-acquire risk assessment questions from the first question set and the second question set in turn according to the first ranking and the second ranking, until the number of acquired risk assessment questions reaches the target number.

[0016] Optionally, the target risk assessment object includes a primary target risk assessment object, and sending the risk assessment questionnaire to a target server corresponding to the target risk assessment object through the target message interface includes:

[0017] Using the risk assessment questionnaire as a request parameter, encapsulating the request parameter into a message in a specified format, calling the target message interface, and pushing the message to the mobile client of the first-level target risk assessment object, so that the first-level target risk assessment object can save the risk assessment questionnaire in the message to the target server through the mobile client; and

[0018] Obtain the access address of the risk assessment questionnaire, concatenate the task ID and the risk assessment questionnaire category ID into the access address of the risk assessment questionnaire, call a preset encapsulation function to encapsulate the concatenated access address into a corresponding QR code image, and send the QR code image to the designated receiving address of the first-level target risk assessment object, wherein the access address of the risk assessment questionnaire is the storage address of the risk assessment questionnaire on the target server.

[0019] Optionally, the target risk assessment object further includes at least one secondary target risk assessment object, and the secondary target risk assessment object is a subordinate assessment object of the primary target risk assessment object; after the target risk assessment object feeds back the risk assessment questionnaire, the risk assessment questionnaire feedback result is transmitted to the target server through the corresponding mobile client, including:

[0020] The secondary target risk assessment object receives the QR code image from the primary target risk assessment object, parses the QR code image through the corresponding mobile client to extract the task ID and the risk assessment questionnaire category ID, and obtains the risk assessment questionnaire through the access address of the risk assessment questionnaire according to the task ID and the risk assessment questionnaire category ID; and

[0021] The secondary target risk assessment object obtains a risk assessment questionnaire feedback result based on the feedback on the risk assessment questionnaire, and sends the risk assessment questionnaire feedback result to the target server through the corresponding mobile client. The risk assessment questionnaire feedback result at least includes the answer selection result of the secondary target risk assessment object to each risk assessment question in the risk assessment questionnaire.

[0022] Optionally, the risk assessment questionnaire feedback result includes at least the task ID, the risk assessment questionnaire category ID and the user ID of the secondary target risk assessment object; the risk assessment result for the target risk assessment category is determined based on all the acquired risk assessment questionnaire feedback results, including:

[0023] Obtain the task ID, risk assessment questionnaire category ID and user ID through the current risk assessment questionnaire feedback result;

[0024] Call a preset risk assessment configuration table, obtain the risk score of each answer selection result in the current risk assessment questionnaire feedback result through the risk assessment configuration table, and determine the total risk score of the current risk assessment questionnaire feedback result based on the risk score of each answer selection result, and determine the risk assessment result of the target risk assessment category based on the total risk score of all risk assessment questionnaire feedback results corresponding to the task ID, wherein the risk assessment configuration table at least includes the risk scores of different answer selection results of risk assessment questions corresponding to different risk assessment questionnaire category IDs.

[0025] Optionally, the risk assessment configuration table also includes role IDs corresponding to different user IDs, and risk calculation weights corresponding to different role IDs; the risk assessment result of the target risk assessment category is determined based on the total risk score of all risk assessment questionnaire feedback results corresponding to the task ID, including:

[0026] Determine the risk assessment result of each secondary target risk assessment object based on the total risk score of all secondary target risk assessment objects corresponding to the task ID, determine a first mean of the total risk scores corresponding to all the secondary target risk assessment objects obtained, and determine the risk assessment result of the primary target risk assessment object based on the first mean; or

[0027] Calculate the second mean of the total risk scores of the secondary target risk assessment objects with the same role ID among all the secondary target risk assessment objects corresponding to the task ID, obtain the risk calculation weight of each role ID, and obtain the risk assessment result of the primary target risk assessment object based on the weighted sum of the second mean and the risk calculation weight of each role ID.

[0028] In a second aspect of the present application, a risk assessment device for data collection based on a mobile client is provided, comprising:

[0029] An instruction receiving module is configured to, in response to a risk assessment instruction, obtain a target risk assessment category and at least one target risk assessment object corresponding to the risk assessment instruction;

[0030] A questionnaire generation module is configured to obtain risk assessment data matching the target risk assessment category from a pre-configured risk assessment database, and generate a risk assessment questionnaire based on the obtained risk assessment data;

[0031] a questionnaire sending module, configured to call a target message interface that matches the target risk assessment object, and send the risk assessment questionnaire to a target server corresponding to the target risk assessment object through the target message interface; and

[0032] A feedback result receiving module is configured to receive the risk assessment questionnaire feedback result sent by the target server through the target message interface, wherein the risk assessment questionnaire feedback result is transmitted to the target server through the corresponding mobile client after the target risk assessment subject provides feedback on the risk assessment questionnaire;

[0033] The risk assessment module is configured to obtain risk assessment questionnaire feedback results from the target server, determine the risk assessment results for the target risk assessment category based on all the obtained risk assessment questionnaire feedback results, and display the risk assessment results through a designated display device.

[0034] In a third aspect of the present application, a computer-readable storage medium is provided, which stores a computer program that, when executed by a processor, causes the processor to execute the risk assessment method based on data collection on a mobile client as described above.

[0035] In a fourth aspect of the present application, a terminal device is provided, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the above-mentioned risk assessment method based on data collection on a mobile client when executing the computer program.

[0036] The embodiments provided in this application have the following beneficial effects:

[0037] The present application collects risk assessment data based on the user's mobile client, and automatically performs risk assessment based on the collected risk assessment data, thereby effectively reducing the transmission limitations of risk assessment data and effectively improving the data processing efficiency of risk assessment.

[0038] Other features and advantages of the embodiments or implementations of the present application will be described in detail in the subsequent specific implementation section. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] The accompanying drawings are used to provide a further understanding of the embodiments of the present application and constitute a part of the specification. Together with the following specific implementations, they are used to explain the embodiments of the present application, but do not constitute a limitation on the embodiments of the present application. In the accompanying drawings:

[0040] Figure 1 A method flow chart schematically illustrates a risk assessment method based on data collection by a mobile client according to an embodiment of the present application;

[0041] Figure 2 A schematic diagram of a survey questionnaire in an embodiment of the present application is schematically shown;

[0042] Figure 3 A schematic block diagram schematically shows a risk assessment device for data collection based on a mobile client according to an embodiment of the present application;

[0043] Figure 4 A schematic diagram of the structure of a terminal device according to an embodiment of the present application is shown schematically.

[0044] Description of Reference Numerals

[0045] 10-terminal device, 100-processor, 101-memory, 102-computer program. DETAILED DESCRIPTION

[0046] The specific implementation of the embodiment of the present application is described in detail below in conjunction with the accompanying drawings. It should be understood that the specific implementation described here is only used to illustrate and explain the embodiment of the present application, and is not used to limit the embodiment of the present application.

[0047] In order to solve the above problems, Figure 1 As shown, the first aspect of the present application provides a risk assessment method for data collection based on a mobile client, comprising:

[0048] S100, in response to a risk assessment instruction, obtaining a target risk assessment category and at least one target risk assessment object corresponding to the risk assessment instruction;

[0049] S200, acquiring risk assessment data matching the target risk assessment category from a pre-configured risk assessment database, and generating a risk assessment questionnaire based on the acquired risk assessment data;

[0050] S300, calling a target message interface that matches the target risk assessment object, and sending the risk assessment questionnaire to a target server corresponding to the target risk assessment object through the target message interface;

[0051] S400, receiving the risk assessment questionnaire feedback result sent by the target server through the target message interface, wherein the risk assessment questionnaire feedback result is transmitted to the target server through the corresponding mobile client after the target risk assessment subject provides feedback on the risk assessment questionnaire;

[0052] S500, obtaining risk assessment questionnaire feedback results from the target server, determining risk assessment results for the target risk assessment category based on all obtained risk assessment questionnaire feedback results, and displaying the risk assessment results through a designated display device.

[0053] In this way, the present application collects risk assessment data based on the user's mobile client, and automatically performs risk assessment based on the collected risk assessment data, thereby effectively reducing the transmission limitations of risk assessment data and effectively improving the data processing efficiency of risk assessment.

[0054] It is understandable that the method of the present application can be applied to the SAP system. In step S100, the target risk assessment category can be one or more, for example, the target risk assessment category can be strategic management risk, corporate governance risk, budget management risk, etc. The target risk assessment object can be one or more, for example, the target risk assessment object can be a group, or a subsidiary of the group, or one or more departments of a subsidiary.

[0055] In step S200, the pre-created risk assessment database includes at least different risk assessment data corresponding to different risk assessment categories, wherein the risk assessment data includes risk assessment questions; for example, in the risk assessment database, the risk assessment questions stored in the risk assessment database are classified according to different risk assessment categories. It is understandable that the same risk assessment question may belong to different risk assessment categories. For example, the IDs of different risk assessment categories may be predetermined, and each risk assessment question may be labeled with the ID of the corresponding risk assessment category. For example, if the target risk assessment category corresponding to the current risk assessment instruction is budget management risk, the ID of budget management risk is obtained, and the risk assessment questions labeled including budget management risk are searched from the risk assessment database to create a risk assessment questionnaire.

[0056] In step S200, after the corresponding risk assessment questions are obtained, a risk assessment questionnaire is generated based on the obtained risk assessment data, including:

[0057] S210. Establish a risk assessment questionnaire configuration table based on the target risk assessment category. The risk assessment questionnaire configuration table at least includes the task ID corresponding to the risk assessment instruction, the risk assessment questionnaire category ID, the risk assessment questionnaire standard ID, the maximum number of options for the risk assessment questions, and the minimum number of options for the risk assessment questions.

[0058] Among them, the risk assessment questionnaire category ID is a custom identifier, which specifically defines a fixed unique identifier for different types of risk assessment questionnaires, i.e., survey questionnaires, and is used to distinguish questionnaire types during function development. For example, the risk assessment questionnaire category ID can adopt the risk assessment category ID, wherein the risk assessment questionnaire category ID is used as the primary key of the risk assessment questionnaire configuration table; the risk assessment questionnaire standard ID is the unique identifier of the survey questionnaire created in different clients; the maximum number of options for risk assessment questions is the maximum number of multiple selections that can be selected when the survey questionnaire allows multiple selections; the minimum number of options for risk assessment questions is the minimum number of multiple selections that can be selected when the survey questionnaire allows multiple selections.

[0059] S220, obtaining a number of risk assessment questions matching the target risk assessment category from the risk assessment database, and generating a risk assessment questionnaire based on the obtained risk assessment questions and the risk assessment questionnaire configuration table. For example, N questions may be randomly selected each time a risk assessment questionnaire is generated, or a fixed number of multiple questions may be randomly selected each time a risk assessment questionnaire is generated.

[0060] In step S220, a number of risk assessment questions matching the target risk assessment category are obtained from the risk assessment database, including:

[0061] S221, randomly obtain a number of risk assessment questions that match the target risk assessment category from the risk assessment database, for example, randomly obtain N risk assessment questions labeled with the target risk assessment category from the risk assessment database; or

[0062] S222, obtain the number of times all risk assessment questions matching the target risk assessment category in the risk assessment database are obtained within a preset period, calculate the average number of times all matched risk assessment questions are obtained within the preset period, establish a first question set with risk assessment questions that are obtained more than the average number of times, establish a second question set with risk assessment questions that are obtained not more than the average number of times, sort the risk assessment questions in the first question set from high to low according to the number of times the risk assessment questions are obtained to obtain a first ranking, and sort the risk assessment questions in the second question set from low to high according to the number of times the risk assessment questions are obtained to obtain a second ranking, and cross-acquire risk assessment questions from the first question set and the second question set in turn according to the first ranking and the second ranking, until the number of risk assessment questions obtained reaches the target number. Monitor and count the number of citations of each question, obtain the number of citations of each question in a preset historical period, such as the last month, and calculate the average number of times, and use the average as a dividing line to divide all risk assessment questions corresponding to the target risk assessment category into a first question set with a number of citations higher than the average number and a second question set with a number of citations not higher than the average number. The questions in the first question set and the second question set are cross-acquired according to the order. For example, the questions in the first question set are cited from high to low as question 1, question 2, question 3, and question 4, and the questions in the second question set are cited from low to high as question 5, question 6, question 7, question 8, and question 9. When acquiring questions, first acquire question 1, then acquire question 5, question 2, question 6, question 3, question 7, question 4, and question 8. If the target number has not been reached, continue to acquire question 9. In this way, when creating a questionnaire, the proportion of questions with high citations and questions with low citations in the questionnaire can be dynamically balanced, thereby avoiding the situation where each generated questionnaire is concentrated on some questions, resulting in uneven distribution of questions and reduced risk assessment results.

[0063] In the present application, the target risk assessment object includes a first-level target risk assessment object, wherein each first-level target risk assessment object may include at least one second-level target risk assessment object, the second-level target risk assessment object is a subordinate assessment object of the first-level target risk assessment object, and each second-level target risk assessment object may include at least one third-level target risk assessment object. For example, the first-level target risk assessment object is enterprise A, and the second-level target risk assessment objects of enterprise A include department 1, department 2, and department 3. The third-level risk assessment objects of department 1 include employee 1, employee 2, and so on.

[0064] In step S300, the risk assessment questionnaire is sent to the target server corresponding to the target risk assessment object through the target message interface, including:

[0065] S310, using the risk assessment questionnaire as a request parameter, and encapsulating the request parameter into a message of a specified format, calling the target message interface, and pushing the message to the mobile client of the first-level target risk assessment object, so that the first-level target risk assessment object can save the risk assessment questionnaire in the message to the target server through the mobile client. For example, a mobile client can be pre-designated as a teammate mobile client of the first-level target risk assessment object. If the first-level target risk assessment object is enterprise A, the mobile client of a certain employee can be designated as the client corresponding to enterprise A. Among them, pushing the questionnaire to the mobile terminal is to call the RFC provided by PI through the SAP end, import the questionnaire content as a request parameter into the RFC, and after the RFC is called, convert the request parameter into a json message, call the mobile client interface service, and push the message to the target mobile client through the target message interface. The first-level target risk assessment object stores the questionnaire to the target server, i.e., the mobile terminal server, through the corresponding mobile client.

[0066] S320, obtain the access address of the risk assessment questionnaire, splice the task ID and the risk assessment questionnaire category ID into the access address of the risk assessment questionnaire, call the preset encapsulation function to encapsulate the spliced ​​access address into the corresponding QR code image, and send the QR code image to the designated receiving address of the first-level target risk assessment object, wherein the access address of the risk assessment questionnaire is the storage address of the risk assessment questionnaire on the target server. Specifically, the access address can be an email address, and the function of generating a QR code can be developed and encapsulated using the ABAP language to send the questionnaire QR code to the email address, splice the risk assessment questionnaire category ID and the task ID into the access address provided by the mobile client, that is, the email address, call the encapsulation function to generate the QR code image, and then call the enterprise email interface service to send the OTF structure of the QR code image to the recipient's email address. The recipient can forward the QR code in the email address to other employees through any communication tool, that is, the first-level target risk assessment object can share the QR code image with its subordinate second-level target risk assessment object.

[0067] In step S400, after the target risk assessment subject provides feedback on the risk assessment questionnaire, the risk assessment questionnaire feedback result is transmitted to the target server through the corresponding mobile client, including:

[0068] S410, the secondary target risk assessment object receives the QR code image from the primary target risk assessment object, parses the QR code image through the corresponding mobile client to extract the task ID and the risk assessment questionnaire category ID, and obtains the risk assessment questionnaire through the access address of the risk assessment questionnaire according to the task ID and the risk assessment questionnaire category ID. The user of the secondary target risk assessment object can scan the QR code through the mobile client, the mobile terminal recognizes the risk assessment questionnaire category ID and the task ID in the QR code, reads the questionnaire content from the mobile terminal server through the access address, and generates the questionnaire style on the front end.

[0069] S420: The secondary target risk assessment object obtains the risk assessment questionnaire feedback result based on the feedback of the risk assessment questionnaire, and sends the risk assessment questionnaire feedback result to the target server through the corresponding mobile client. The risk assessment questionnaire feedback result at least includes the answer selection result of the secondary target risk assessment object to each risk assessment question in the risk assessment questionnaire. The user fills in the questionnaire on the mobile terminal and submits it, and the filling result is saved to the mobile terminal server.

[0070] The risk assessment questionnaire feedback result includes at least the task ID, the risk assessment questionnaire category ID and the user ID of the secondary target risk assessment object; in step S500, the risk assessment result for the target risk assessment category is determined based on all the risk assessment questionnaire feedback results obtained, including:

[0071] S510: Obtain the task ID, risk assessment questionnaire category ID and user ID of the secondary target risk assessment object through the current risk assessment questionnaire feedback result. The user ID may be a user name or other user identification.

[0072] S520. Call a preset risk assessment configuration table, obtain the risk score of each answer selection result in the current risk assessment questionnaire feedback result through the risk assessment configuration table, and determine the total risk score of the current risk assessment questionnaire feedback result based on the risk score of each answer selection result, and determine the risk assessment result of the target risk assessment category based on the total risk score of all risk assessment questionnaire feedback results corresponding to the task ID, wherein the risk assessment configuration table at least includes the risk scores of different answer selection results of risk assessment questions corresponding to different risk assessment questionnaire category IDs.

[0073] Specifically, the present application obtains the feedback results of the questionnaire from the mobile server by defining an automatic job in the SAP system, for example, calling the PI RFC every 2 hours. The mobile terminal returns the questionnaire results to PI in the form of a json message, and PI converts the json message into an XML message and returns it to SAP. SAP parses the questionnaire results and saves them to a transparent table, where the transparent table contains: task ID, custom questionnaire ID, i.e., risk assessment questionnaire category ID, question ID, user ID, i.e., user name, answer option result ID, answer option result text, impact level, impact level score, probability level, probability level score, department code, company code, risk id and other fields.

[0074] Among them, the task ID is the primary key, which is the unique identifier of the current risk assessment task; the custom questionnaire identifier is the primary key, which is the custom identifier of the questionnaire used for the risk assessment task, that is, the risk assessment questionnaire category ID; the question identifier is the primary key, which is the unique identifier of the question in the questionnaire; the user name is the primary key, which is the employee number of the person involved in the risk assessment; the answer option result identifier is the primary key, which is the unique identifier of the answer result in the same question; the answer option result text is the text of the answer result; the impact level is the impact degree of the assessed risk, for example, the impact level can include 1-5, among which, when the assessment method is qualitative, the impact level of the selected risk is higher than 4 by default, indicating that the risk impact degree is high; when the assessment method is quantitative, the user's 5 impact levels for the same risk, such as financial impact, security impact, The arithmetic average of the selection results of environmental impact, reputation impact, and compliance impact is used as the impact level; the impact level score is the score of the impact level; the probability level is the possibility of the occurrence of the assessed risk. For example, the probability levels include 1-5. When the assessment method is qualitative, the default probability level of the selected risk is higher than 4, indicating that the possibility of the risk occurrence is high; when the assessment method is quantitative, the user's selection result for the probability level of the risk is used as the probability level; the probability level score is the score of the probability level; the department code is obtained from the master data management platform according to the employee number; the company code is obtained from the master data management platform according to the department code; the risk id is the risk id corresponding to the answer option, that is, the risk assessment questionnaire category ID, which can be obtained from the risk assessment configuration table.

[0075] In the present application, the risk scores corresponding to the different answer options for each risk assessment question are pre-configured. After receiving the feedback results, the risk assessment scores of each question in each feedback result are calculated by looking up a table, and the total risk score of the current feedback result can be obtained by summing up the risk assessment scores of each question. After obtaining the total risk score of each feedback result, the impact level for a certain impact on the same risk or for each impact on the same risk can be determined based on the risk assessment scores of each question in each feedback result. For example, the risk assessment score corresponds to different impact levels for different impacts of different risks, and the corresponding impact score can be determined based on the determined impact level. For example, if the impact level is 4, its impact score can be configured as 4; if there are multiple risk impacts, the average of each impact level of the same risk can be used as the impact level. Similarly, the probability level can also be determined based on the risk assessment scores of each question. For example, different risk assessment scores correspond to different probability levels for different risks. Or, if Figure 2 As shown, different impacts of risks and their impact levels, impact scores, probability levels and probability scores can be used as question options in the survey questionnaire, directly selected by survey users, and directly obtained as questionnaire feedback results.

[0076] Among them, the risk assessment configuration table can also include role IDs corresponding to different user IDs, and risk calculation weights corresponding to different role IDs. It can be understood that the role IDs corresponding to different user IDs, and the risk calculation weights corresponding to different role IDs can be directly configured in the risk assessment configuration table, or they can be configured separately. Taking it as an example to configure it separately in the role weighting method configuration table, the table is divided into three transparent tables: role table, header table and detail table. Among them, the role table includes fields such as role ID, role name, and whether it is a basic role. The meanings are as follows: role ID, primary key, unique identifier of the role; role name, role name displayed on the user page; whether it is a basic role, considering that when the scale of the enterprise is large, if roles are assigned to all personnel, the maintenance workload is too large, so only personnel need to be assigned to roles with fewer people, and personnel without assigned roles are uniformly classified as basic roles.

[0077] The header table includes fields such as organization code, role ID, weight, and total number of people. The meanings are as follows: Organization code, primary key, master data code of the main organization of the role weighting method; Role ID, primary key, role ID used by the organization; Weight is the risk calculation weight, the weight of the role score in the organization; Total number of people, the total number of people participating in the risk assessment under the role, used to calculate the role score.

[0078] The detail table includes fields such as employee number, organization code, role ID, and personnel name, with the following meanings: employee number, primary key, employee number of the risk assessor; organization code, code of the organization to which the risk assessor belongs; role ID, ID of the role to which the risk assessor belongs; personnel name, name of the risk assessor.

[0079] In step S520, the risk assessment result of the target risk assessment category is determined based on the total risk score of all risk assessment questionnaire feedback results corresponding to the task ID, including:

[0080] S521. Determine the risk assessment results of each secondary target risk assessment object based on the total risk score of all secondary target risk assessment objects corresponding to the task ID, determine the first mean of the total risk scores corresponding to all secondary target risk assessment objects obtained, and determine the risk assessment results of the primary target risk assessment object based on the first mean. When the statistical method for risk assessment is the organizational geometric method, the risk assessment results are counted from the lowest level organization upwards, and the assessment results in each level of organization are arithmetic averaged according to the risk score, and the risk importance ranking is calculated. After convolution to the upper level organization, the risk scores of all lower level organizations are arithmetic averaged, and so on.

[0081] S522. Calculate the second mean of the total risk score of the second-level target risk assessment objects with the same role ID among all the second-level target risk assessment objects corresponding to the task ID, obtain the risk calculation weight of each role ID, and obtain the risk assessment result of the first-level target risk assessment object based on the weighted sum of the second mean and the risk calculation weight of each role ID. When the statistical method of risk assessment is the role weighting method, the company-level organization is used as the smallest unit, and the employees are grouped according to the role. The risk in each role is arithmetic averaged to obtain the risk score of each role, and then weighted statistics are performed according to the weight of each role to obtain the company's score for each risk. The group-level risk score is the arithmetic average of the risk scores of all subordinate companies.

[0082] After obtaining the risk assessment results of each target risk assessment object, that is, the total risk score, each target risk assessment object is sorted from high to low according to the total risk score. For example, when the calculation unit is a company, the company-level risk importance ranking is obtained, and when the calculation unit is a group, the group-level risk importance ranking is obtained.

[0083] like Figure 3 As shown, in a second aspect of the present application, a risk assessment device for data collection based on a mobile client is provided, comprising:

[0084] An instruction receiving module is configured to obtain, in response to a risk assessment instruction, a target risk assessment category and at least one target risk assessment object corresponding to the risk assessment instruction;

[0085] A questionnaire generation module is configured to obtain risk assessment data matching a target risk assessment category from a pre-configured risk assessment database, and generate a risk assessment questionnaire based on the obtained risk assessment data;

[0086] The questionnaire sending module is configured to call a target message interface that matches the target risk assessment object, and send the risk assessment questionnaire to a target server corresponding to the target risk assessment object through the target message interface;

[0087] The feedback result receiving module is configured to receive the risk assessment questionnaire feedback result sent by the target server through the target message interface, wherein the risk assessment questionnaire feedback result is transmitted to the target server through the corresponding mobile client after the target risk assessment subject provides feedback on the risk assessment questionnaire;

[0088] The risk assessment module is configured to obtain risk assessment questionnaire feedback results from the target server, determine the risk assessment results for the target risk assessment category based on all the obtained risk assessment questionnaire feedback results, and display the risk assessment results through a designated display device.

[0089] The technicians in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example for illustration. In practical applications, the above-mentioned function allocation can be completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above. The functional units and modules in the embodiment can be integrated in a processing unit, or each unit can exist physically separately, or two or more units can be integrated in one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of software functional units. In addition, the specific names of the functional units and modules are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of this application. The specific working process of the units and modules in the above-mentioned system can refer to the corresponding process in the aforementioned method embodiment, which will not be repeated here.

[0090] In a third aspect of the present application, a computer-readable storage medium is provided, which stores a computer program that, when executed by a processor, causes the processor to execute the risk assessment method based on data collection on a mobile client as described above.

[0091] In a fourth aspect of the present application, a terminal device is provided, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the above-mentioned risk assessment method based on data collection on a mobile client when executing the computer program.

[0092] like Figure 4FIG. 1 is a schematic diagram of a terminal device provided in an embodiment of the present application. Figure 4 As shown, the terminal device 10 of this embodiment includes: a processor 100, a memory 101, and a computer program 102 stored in the memory 101 and executable on the processor 100. When the processor 100 executes the computer program 102, the steps in the above method embodiment are implemented. Alternatively, when the processor 100 executes the computer program 102, the functions of each module / unit in the above device embodiments are implemented.

[0093] Exemplarily, the computer program 102 may be divided into one or more modules / units, one or more modules / units are stored in the memory 101, and are executed by the processor 100 to complete the present application. One or more modules / units may be a series of computer program instruction segments capable of completing specific functions, and the instruction segments are used to describe the execution process of the computer program 102 in the terminal device 10.

[0094] The terminal device 10 may be a computing device such as a desktop computer, a notebook, a PDA, or a cloud server. The terminal device 10 may include, but is not limited to, a processor 100 and a memory 101. Those skilled in the art will appreciate that Figure 4 It is only an example of the terminal device 10 and does not constitute a limitation of the terminal device 10. It may include more or fewer components than shown in the figure, or a combination of certain components, or different components. For example, the terminal device may also include input and output devices, network access devices, buses, etc.

[0095] The processor 100 may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or the processor may be any conventional processor, etc.

[0096] The memory 101 may be an internal storage unit of the terminal device 10, such as a hard disk or memory of the terminal device 10. The memory 101 may also be an external storage device of the terminal device 10, such as a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc. equipped on the terminal device 10. Further, the memory 101 may also include both an internal storage unit of the terminal device 10 and an external storage device. The memory 101 is used to store computer programs and other programs and data required by the terminal device 10. The memory 101 may also be used to temporarily store data that has been output or is to be output.

[0097] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0098] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0099] The above are only embodiments of the present application and are not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included within the scope of the claims of the present application.

Claims

1. A risk assessment method for data collection based on a mobile client, characterized in that: include: In response to a risk assessment instruction, obtaining a target risk assessment category and at least one target risk assessment object corresponding to the risk assessment instruction; Acquire risk assessment data matching the target risk assessment category from a pre-configured risk assessment database, and generate a risk assessment questionnaire based on the acquired risk assessment data; Calling a target message interface that matches the target risk assessment object, and sending the risk assessment questionnaire to a target server corresponding to the target risk assessment object through the target message interface; as well as Receiving the risk assessment questionnaire feedback result sent by the target server through the target message interface, wherein the risk assessment questionnaire feedback result is transmitted to the target server through the corresponding mobile client after the target risk assessment subject provides feedback on the risk assessment questionnaire; A risk assessment questionnaire feedback result is obtained from the target server, a risk assessment result for the target risk assessment category is determined based on all the obtained risk assessment questionnaire feedback results, and the risk assessment result is displayed through a designated display device.

2. The risk assessment method for data collection based on a mobile client according to claim 1 is characterized in that: The risk assessment database at least includes different risk assessment data corresponding to different risk assessment categories, wherein the risk assessment data includes risk assessment questions; generating a risk assessment questionnaire based on the acquired risk assessment data includes: Establishing a risk assessment questionnaire configuration table according to the target risk assessment category, the risk assessment questionnaire configuration table at least includes the task ID corresponding to the risk assessment instruction, the risk assessment questionnaire category ID, the risk assessment questionnaire standard ID, the maximum number of options for the risk assessment question, and the minimum number of options for the risk assessment question; A number of risk assessment questions matching the target risk assessment category are obtained from the risk assessment database, and a risk assessment questionnaire is generated based on the obtained risk assessment questions and the risk assessment questionnaire configuration table.

3. The risk assessment method for data collection based on a mobile client according to claim 2 is characterized in that: Acquire a number of risk assessment questions matching the target risk assessment category from the risk assessment database, including: Randomly obtain a number of risk assessment questions matching the target risk assessment category from the risk assessment database; or Obtain the number of times all risk assessment questions matching the target risk assessment category in the risk assessment database are acquired within a preset time period, calculate the average number of times all matched risk assessment questions are acquired within the preset time period, establish a first question set with risk assessment questions acquired a number of times higher than the average number, establish a second question set with risk assessment questions acquired a number of times not higher than the average number, sort the risk assessment questions in the first question set from high to low according to the number of times the risk assessment questions are acquired to obtain a first ranking, and sort the risk assessment questions in the second question set from low to high according to the number of times the risk assessment questions are acquired to obtain a second ranking, and cross-acquire risk assessment questions from the first question set and the second question set in turn according to the first ranking and the second ranking, until the number of acquired risk assessment questions reaches the target number.

4. The risk assessment method for data collection based on a mobile client according to claim 2 is characterized in that: The target risk assessment object includes a first-level target risk assessment object, and sending the risk assessment questionnaire to a target server corresponding to the target risk assessment object through the target message interface includes: Using the risk assessment questionnaire as a request parameter, encapsulating the request parameter into a message in a specified format, calling the target message interface, and pushing the message to the mobile client of the first-level target risk assessment object, so that the first-level target risk assessment object can save the risk assessment questionnaire in the message to the target server through the mobile client; and Obtain the access address of the risk assessment questionnaire, concatenate the task ID and the risk assessment questionnaire category ID into the access address of the risk assessment questionnaire, call a preset encapsulation function to encapsulate the concatenated access address into a corresponding QR code image, and send the QR code image to the designated receiving address of the first-level target risk assessment object, wherein the access address of the risk assessment questionnaire is the storage address of the risk assessment questionnaire on the target server.

5. The risk assessment method for data collection based on a mobile client according to claim 4 is characterized in that: The target risk assessment object further includes at least one secondary target risk assessment object, which is a subordinate assessment object of the primary target risk assessment object; after the target risk assessment object feeds back the risk assessment questionnaire, the risk assessment questionnaire feedback result is transmitted to the target server through the corresponding mobile client, including: The secondary target risk assessment object receives the QR code image from the primary target risk assessment object, parses the QR code image through the corresponding mobile client to extract the task ID and the risk assessment questionnaire category ID, and obtains the risk assessment questionnaire through the access address of the risk assessment questionnaire according to the task ID and the risk assessment questionnaire category ID; and The secondary target risk assessment object obtains a risk assessment questionnaire feedback result based on the feedback on the risk assessment questionnaire, and sends the risk assessment questionnaire feedback result to the target server through the corresponding mobile client. The risk assessment questionnaire feedback result at least includes the answer selection result of the secondary target risk assessment object to each risk assessment question in the risk assessment questionnaire.

6. The risk assessment method for data collection based on a mobile client according to claim 5 is characterized in that: The risk assessment questionnaire feedback result includes at least the task ID, the risk assessment questionnaire category ID and the user ID of the secondary target risk assessment object; The risk assessment results for the target risk assessment category are determined based on all the risk assessment questionnaire feedback results obtained, including: Obtain the task ID, risk assessment questionnaire category ID and user ID through the current risk assessment questionnaire feedback result; Call a preset risk assessment configuration table, obtain the risk score of each answer selection result in the current risk assessment questionnaire feedback result through the risk assessment configuration table, and determine the total risk score of the current risk assessment questionnaire feedback result based on the risk score of each answer selection result, and determine the risk assessment result of the target risk assessment category based on the total risk score of all risk assessment questionnaire feedback results corresponding to the task ID, wherein the risk assessment configuration table at least includes the risk scores of different answer selection results of risk assessment questions corresponding to different risk assessment questionnaire category IDs.

7. The risk assessment method for data collection based on a mobile client according to claim 6 is characterized in that: The risk assessment configuration table also includes role IDs corresponding to different user IDs, and risk calculation weights corresponding to different role IDs; The risk assessment result of the target risk assessment category is determined based on the total risk score of all risk assessment questionnaire feedback results corresponding to the task ID, including: Determine the risk assessment result of each secondary target risk assessment object based on the total risk score of all secondary target risk assessment objects corresponding to the task ID, determine the first mean of the total risk scores corresponding to all the secondary target risk assessment objects obtained, and determine the risk assessment result of the primary target risk assessment object based on the first mean; or Calculate the second mean of the total risk scores of the secondary target risk assessment objects with the same role ID among all the secondary target risk assessment objects corresponding to the task ID, obtain the risk calculation weight of each role ID, and obtain the risk assessment result of the primary target risk assessment object based on the weighted sum of the second mean and the risk calculation weight of each role ID.

8. A risk assessment device for data collection based on a mobile client, characterized in that: include: An instruction receiving module is configured to, in response to a risk assessment instruction, obtain a target risk assessment category and at least one target risk assessment object corresponding to the risk assessment instruction; A questionnaire generation module is configured to obtain risk assessment data matching the target risk assessment category from a pre-configured risk assessment database, and generate a risk assessment questionnaire based on the obtained risk assessment data; A questionnaire sending module is configured to call a target message interface that matches the target risk assessment object, and send the risk assessment questionnaire to a target server corresponding to the target risk assessment object through the target message interface; as well as A feedback result receiving module is configured to receive the risk assessment questionnaire feedback result sent by the target server through the target message interface, wherein the risk assessment questionnaire feedback result is transmitted to the target server through the corresponding mobile client after the target risk assessment subject provides feedback on the risk assessment questionnaire; The risk assessment module is configured to obtain risk assessment questionnaire feedback results from the target server, determine the risk assessment results for the target risk assessment category based on all the obtained risk assessment questionnaire feedback results, and display the risk assessment results through a designated display device.

9. A computer-readable storage medium, characterized in that: A computer program is stored which, when executed by a processor, enables the processor to execute the risk assessment method based on data collection by a mobile client as claimed in any one of claims 1 to 7.

10. A terminal device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the risk assessment method based on data collection by a mobile client as described in any one of claims 1 to 7 is implemented.

Images