Data Flow Platform for Security Risk Assessment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data security approaches lack the ability to attribute data interactions to business processes and provide context on whether these interactions are permitted or sanctioned by the enterprise, making it difficult for security professionals to manage and prioritize data security risks effectively.
Innovation Solution
The solution involves establishing communication with disparate monitoring systems, aggregating alerts, standardizing data flow steps, and storing them in a central database to identify potential security issues by comparing observed processing sequences with expected sequences, leveraging cloud services and minimizing resource requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data flows are captured and managed using related art systems, then data security information is collected, but the systems are resource intensive and provide minimal insight into data risk
Solution Approach 1:
The patent introduces a data flow platform as an intermediary layer between disparate monitoring systems and the central database. This platform aggregates alerts from multiple monitoring systems, standardizes data flow steps, and manages the connection to the central database, thereby reducing the complexity and resource requirements on individual systems while maintaining comprehensive data security assessment capabilities
Solution Approach 2:
The central database serves as a universal repository that stores standardized data flow steps from multiple disparate monitoring systems. This multi-functional database consolidates security information, risk assessments, and compliance data from various sources, enabling comprehensive analysis without requiring each monitoring system to independently maintain complex assessment capabilities
2Reliability
If disparate monitoring systems are used to monitor data usage, then comprehensive monitoring coverage is achieved, but the systems cannot expose relationships between data or audit flow modifications
Solution Approach 1:
The patent merges data from multiple disparate monitoring systems by aggregating alerts and standardizing them into a common format in the central database. This consolidation preserves comprehensive monitoring coverage while recovering lost context information about data relationships, flow modifications, and business process associations that individual systems cannot provide in isolation
Solution Approach 2:
The system implements feedback mechanisms where the centralized platform continuously monitors and analyzes aggregated data flow information, then provides insights back to the monitoring systems and security professionals. This feedback loop enables auditing of flow modifications and exposes relationships between data elements by comparing observed flows against expected patterns and business process definitions
3Ease of manufacture
If general office productivity software is used for data flow analysis, then basic documentation is possible, but the software is incapable of executing algorithms to identify data breach risks or determining control gaps
Solution Approach 1:
The patent replaces manual office productivity software with an automated data flow platform that executes algorithms and analytical processes. This substitution maintains ease of implementation through standardized interfaces while dramatically increasing security analysis capabilities by automatically identifying data breach risks, determining control gaps, and analyzing relationships between data elements through computational methods
Data Source
AI summary
A method and apparatus useful for data risk monitoring and management includes configuration and analysis of data flows to identify and assess risk and compliance to various regulatory standards and business practices. The evaluation of monitored data flows are then further used to identify potential security risks based on deviation from expected flows or compliant handling methods.