Compliance State Management for Extensible Resource Assessment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing compliance management systems struggle to efficiently identify and remediate non-conforming resources across diverse computing environments, lacking flexibility to accommodate new assessment mechanisms and resource types.
Innovation Solution
Implementing compliance types that associate multiple compliance schemes, allowing for the generation and management of compliance states, enabling extension to new resources and views, and providing customizable access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If compliance management systems assess resources across diverse computing environments, then compliance coverage is improved, but system complexity increases
Solution Approach 1:
The patent segments compliance management into distinct compliance types (e.g., security compliance, operational compliance) and compliance schemes. Each compliance type represents a specific domain with its own assessment criteria, allowing the system to manage diversity through structured division rather than monolithic complexity.
Solution Approach 2:
The patent creates a universal compliance assessment framework that can evaluate multiple resource types (compute resources, storage resources, network resources) across diverse computing environments using a common set of compliance types and schemes. This multi-functional approach enables broad compliance coverage without proportionally increasing system complexity.
2Productivity
If compliance management systems identify non-conforming resources quickly, then remediation efficiency is improved, but assessment thoroughness may worsen
Solution Approach 1:
The patent performs preliminary compliance assessments continuously in the background, maintaining up-to-date compliance states for resources before remediation is needed. This preliminary action allows the system to quickly identify non-conforming resources without sacrificing assessment thoroughness, as the comprehensive evaluation has already been completed in advance.
Solution Approach 2:
The patent implements feedback mechanisms that continuously monitor resource compliance states and provide real-time information about non-conforming resources. This feedback loop enables quick identification and remediation while maintaining assessment thoroughness through ongoing comprehensive evaluation rather than single-point checks.
Data Source
AI summary
Compliance schemes may be associated with compliance types to provide resource compliance management. Compliance types may be created and associated with different compliance schemes. Compliance state for the compliance types may be generated and provided in response to requests to access the compliance state. Queries for compliance state, for example, may request compliance state, and query predicates or other criteria may be applied to the compliance state in order to perform the query.