Electric power mobile internet operation compliance risk assessment method, system and device and storage medium

Abstract

The invention relates to an electric power mobile internet operation compliance risk assessment method, system and device and a storage medium. The evaluation method comprises the following steps: collecting operation compliance laws and regulations, and establishing a standard library; establishing a risk index library and a risk model based on the standard library; collecting behavior data of each operation stage for analysis, and determining a compliance check list; a risk report is produced based on the compliance check list and the risk model. According to the invention, a standardized electric power mobile internet operation compliance mechanism can be established, compliance management benefits are improved through an informatization technical means, risks of electric power internet enterprises in operation work are found in time, and improvement is supervised and urged.

Description

Technical Field

[0001] The present invention relates to the technical field of data processing, and particularly relates to an evaluation method, system, device and storage medium for the compliance risk of power mobile Internet operation. Background Art

[0002] Internet services have penetrated into all aspects of people's lives and become an indispensable part of modern society. In recent years, the mobile Internet in China has developed vigorously, and innovative forms such as APPs, mini-programs, and instant applications have emerged continuously. The power industry has played an important role in promoting economic and social development and serving people's lives by means of mobile Internet technology. With the wide application of Internet services, compliance issues in aspects such as user privacy, network security, data security, unfair competition, and advertising have become increasingly prominent, bringing huge challenges to enterprises and individuals. In recent years, departments such as the State Administration for Market Regulation, the Ministry of Public Security, the Cyberspace Administration of China, and the Ministry of Industry and Information Technology have strengthened the compliance management of various operation behaviors in the Internet industry and introduced various laws, regulations and regulatory measures. At present, the main difficulties in the compliance of mobile Internet operation in enterprises mainly focus on the following aspects: First, the national supervision and punishment efforts have been continuously increased, and laws such as the "Network Security Law", the "Personal Information Protection Law", the "Data Security Law", and the "Anti-Telecom Network Fraud Law" have been successively introduced, and the "Anti-Money Laundering Law", the "Anti-Unfair Competition Law", and the "Anti-Monopoly Law" have been newly revised, imposing greater constraints on the compliance of enterprise operation. Second, users' awareness of protecting their own rights and interests has been continuously enhanced, and they will file complaints with relevant national regulatory departments about issues such as APPs' illegal collection of sensitive personal information, the fairness of promotional activities, the authenticity of publicity advertisements, and the monopoly behaviors of enterprises. Third, the enterprise's own compliance system library is not updated in a timely manner. The laws and regulations related to the compliance of mobile Internet operation cover many fields, and enterprises lack the ability to identify various clauses and cannot establish a complete compliance system.

[0003] Existing technical solutions to solve the above problems: constructing a method for intelligent enterprise compliance, establishing an enterprise compliance index prediction module, an enterprise illegal and irregular index availability judgment module, an enterprise illegal and irregular index identification module, an enterprise compliance construction module, and an enterprise compliance disposal module; the enterprise compliance index prediction module is used to judge the enterprise compliance index based on compliance data and transmit the judgment result and stored data information to the enterprise illegal and irregular index availability judgment module; the enterprise compliance construction module is used to formulate a corresponding enterprise compliance rectification plan for the problems occurring in the enterprise according to the enterprise compliance construction level transmitted by the enterprise illegal and irregular index availability judgment module and transmit the formulated rectification plan to the enterprise compliance disposal module; the enterprise compliance disposal module sends relevant evidence and indexes to relevant departments according to the rectification plan transmitted by the enterprise compliance construction module to stop losses in time.

[0004] Problems existing in the prior art: In the existing compliance management of power mobile Internet operations, the identification is not comprehensive and timely enough. There are many laws and regulations in the field of mobile Internet operations, and in some individual operation fields such as personal information protection and content compliance regulations, the updates are frequent, which easily leads to an incomplete and untimely enterprise list. The existing operation risks mainly rely on manual review, lacking a precise and comprehensive analysis of the recognition of terms, and it is easy to have missed judgments and misjudgments. The compliance system is not sound, and a sound compliance management system and operation mechanism have not been established, and hidden operation compliance risks cannot be discovered in time.

[0005] In summary, in order to ensure the healthy development of mobile Internet-related applications and power enterprises themselves, and to safeguard the legitimate rights and interests of the majority of users, it is very urgent to establish an effective operation compliance risk assessment method. Summary of the Invention

[0006] The present invention aims to provide a method, system, electronic device and storage medium for assessing the operation compliance risk of power mobile Internet, so as to solve the above technical problems, improve the compliance management efficiency, and timely discover the risks in the operation work of power Internet enterprises and urge improvement.

[0007] In a first aspect, a method for assessing the operation compliance risk of power mobile Internet includes the following processes:

[0008] S100: Collect operation compliance laws and regulations and establish a standard library;

[0009] S200: Establish a risk index library and a risk model based on the standard library;

[0010] S300: Collect and analyze the behavior data in each operation stage to determine a compliance inspection list;

[0011] S400: Generate a risk report based on the compliance inspection list and the risk model.

[0012] Preferably, in the S100, the scope of laws and regulations covers network security, data security, personal information protection, anti-money laundering, anti-monopoly, anti-unfair competition, content security, algorithm compliance, and advertising compliance; the update situation includes the latest release information and the latest revision information, and the regulatory standard library is updated in real time according to the scope of laws covered and the update situation.

[0013] Preferably, in S200, the risk indicators include: inspection items, legal basis, inspection content, common problems, rectification measures, and responsible objects; mark the laws and regulations clauses according to the contents of each risk indicator item to form risk labels; construct a risk model based on the inspection items.

[0014] Preferably, in S300, the behavior data of each stage of the power mobile Internet operation is collected, the behavior data of each stage is sorted out and extracted, and a compliance check list is determined.

[0015] Preferably, in S400, the risk report includes: a total risk index; and a quantitative assessment of the compliance status during the operation of the power mobile Internet through the total risk index.

[0016] Second, a system for assessing compliance risks of power mobile Internet operations includes:

[0017] The collection module is used to collect compliance laws and regulations;

[0018] Database module, used to store laws and regulations, industry standards, and risk indicator libraries;

[0019] A first identification module is used to read and identify the laws and regulations in the legal and regulatory standard library according to a preset operating field, and establish an operating field standard library;

[0020] The second identification module identifies the laws and regulations in the legal and regulatory standard library and establishes a risk indicator library;

[0021] A receiving module having an input end, wherein the input end is used to input reporting information to form a compliance checklist;

[0022] A risk assessment module is provided with an overall risk model for outputting a risk report based on the compliance checklist.

[0023] In a third aspect, an electronic device specifically includes: a memory storing executable program code; a processor coupled to the memory; the processor calls the executable program code stored in the memory to execute any one of the above-mentioned evaluation methods.

[0024] In a fourth aspect, a computer-readable storage medium specifically includes: storing a computer program, wherein the computer program enables a computer to execute any one of the above-mentioned evaluation methods.

[0025] The advantages of the present invention over the prior art are:

[0026] (i) The present invention improves the accuracy of compliance work in the operation of the electric power mobile Internet, reduces reliance on the experience of auditors, and is prone to subjective omissions and misjudgments.

[0027] (II) The present invention can realize the construction of risk models in different areas of compliance of power mobile Internet operations, comprehensively guide enterprises to diagnose violations of laws and regulations, and establish and improve risk management and prevention mechanisms.

[0028] (3) The present invention conducts analysis based on preset rules and models, which can cover the most fine-grained types of operation compliance. At the same time, combined with the business of the power Internet, it conducts compliance risk early warning for the operation of the power mobile Internet. Description of the Drawings

[0029] Figure 1 It is a schematic flowchart of the evaluation method for the operation compliance risk of a power mobile Internet of the present invention. Detailed Implementation Manner

[0030] An evaluation method for the operation compliance risk of a power mobile Internet includes the following processes:

[0031] S100: Collect operation compliance laws and regulations and establish a standard library; specifically including: Real-time monitoring of the update of laws and regulations through the whole network monitoring technical means, covering network security, data security, personal information protection, anti-money laundering, anti-monopoly, anti-unfair competition, content security, algorithm compliance, and advertising compliance. The laws and regulations cover national laws, official regulations, national standards, industry standards, and power industry standards. The update situation includes the latest release information and the latest revision information. Conduct text-based and structured processing on the laws and regulations to establish a standard library. Update the regulatory standard library in real time according to the scope covered by the laws and regulations and the update situation. Based on the focus of the laws and regulations clauses for different types of mobile Internet operations, realize the preliminary identification of the regulatory standard information through natural language processing technology, and establish an intelligent matching between the mobile Internet operation types and the regulatory standards through natural language processing technology.

[0032] S200: Establish a risk index library and a risk model based on the standard library; specifically including: The steps to establish a risk index library first identify each standard clause in the operation compliance standard library of the mobile Internet. Then, based on each clause, construct risk index items to form a risk index library. It can be achieved by training a neural network model through big data to obtain a model for identifying risk index items. The risk index items include inspection items, legal basis, inspection content, common problems, rectification measures, and responsible objects. Form a risk index library, mark the laws and regulations clauses according to the contents of each risk index item to form risk labels. Set weights for the inspection items according to the importance of the laws and regulations clauses involved to reflect the influence degree of different laws and regulations clauses on the inspection items, and construct a risk model based on the inspection items.

[0033] S300: Collect and analyze the behavior data in each operation stage to determine a compliance inspection list; specifically including: Collect the behavior data in each stage of the power mobile Internet operation, and set each triggering mechanism including independent triggering, model update triggering, operation accident triggering, and special event triggering. Sort out and extract the behavior data in each stage to determine a compliance inspection list.

[0034] S400: Generate a risk report based on the compliance checklist and risk model; specifically including: the total risk index is included in the risk report, and the compliance status during the operation of the power mobile Internet is quantitatively evaluated through the risk index.

Claims

1. A method for assessing compliance risks of power mobile Internet operations, characterized in that: The process includes the following: S100: Collect operational compliance laws and regulations and establish a standard library; S200: Establish risk indicator library and risk model based on standard library; S300: Collect behavioral data from each operation stage for analysis and determine the compliance checklist; S400: Produce risk reports based on compliance checklists and risk models.

2. According to claim 1, a method for assessing compliance risks of power mobile Internet operations is characterized in that: In the S100, the scope of laws and regulations covers network security, data security, personal information protection, anti-money laundering, anti-monopoly, anti-unfair competition, content security, algorithm compliance, and advertising compliance; updates include the latest release information and the latest revision information, and the regulatory standards library is updated in real time according to the scope and update status of the law.

3. According to claim 1, a method for assessing compliance risks of power mobile Internet operations is characterized in that: In S200, risk indicators include: inspection items, legal basis, inspection content, common problems, rectification measures, and responsible parties; legal and regulatory provisions are marked according to the contents of the risk indicator items to form risk labels; Build a risk model based on the inspection items.

4. According to claim 1, a method for assessing compliance risks of power mobile Internet operations is characterized in that: In S300, the behavior data of each stage of the power mobile Internet operation is collected, the behavior data of each stage is sorted and extracted, and a compliance check list is determined.

5. According to claim 1, a method for assessing compliance risks of power mobile Internet operations is characterized in that: In S400, the risk report includes: a total risk index; and a quantitative assessment of the compliance status during the operation of the power mobile Internet through the total risk index.

6. A system for evaluating compliance risks of power mobile Internet operations, characterized in that: include: The collection module is used to collect compliance laws and regulations; Database module, used to store laws and regulations, industry standards, and risk indicator libraries; A first identification module is used to read and identify the laws and regulations in the legal and regulatory standard library according to a preset operating field, and establish an operating field standard library; The second identification module identifies the laws and regulations in the legal and regulatory standard library and establishes a risk indicator library; A receiving module having an input end, wherein the input end is used to input reporting information to form a compliance checklist; A risk assessment module is provided with an overall risk model for outputting a risk report based on the compliance checklist.

7. An electronic device, comprising: A memory storing executable program code; a processor coupled to the memory; The processor calls the executable program code stored in the memory to execute any one of the evaluation methods of claims 1 to 5.

8. A computer-readable storage medium, comprising: A computer program is stored, and the computer program enables a computer to execute any one of the evaluation methods of claims 1 to 5.

Images