Risk Assessment Query System for Process Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing technologies face challenges in identifying and mitigating risks associated with processes handling sensitive customer information, such as credit card numbers and social security numbers, due to difficulties in assessing risk factors and implementing necessary security measures.

Innovation Solution

The implementation of a system that uses risk assessment queries to identify and calculate a process risk metric by presenting queries to a client device, receiving responses, determining response values, and prioritizing risk mitigation for processes with high risk scores.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If comprehensive risk assessment queries are implemented to identify security gaps, then risk identification capability is improved, but system complexity increases

Engineering Contradiction:
Improverisk identification capabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The risk assessment system is segmented into multiple independent components: a query database storing standardized risk queries, a processing system that retrieves and presents queries, and a client device for interaction. This segmentation allows the system to handle comprehensive risk assessment through modular components rather than a monolithic complex system.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary processing system between the comprehensive risk assessment queries and the client device. This intermediary manages the retrieval, presentation, and processing of queries, reducing the complexity at the client level while maintaining comprehensive assessment capability through the coordinated interaction of multiple components.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Measurement precision

If detailed risk assessment queries are presented to users, then assessment precision is improved, but time required for completion increases

Engineering Contradiction:
Improveassessment precisionVSAvoidtime for risk assessment
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The system performs preliminary actions by pre-storing standardized risk assessment queries in a database and pre-configuring the assessment framework. This allows users to quickly access and respond to relevant queries without time-consuming on-site analysis, while maintaining precise assessment through the structured query design.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system incorporates feedback mechanisms where user responses to risk assessment queries are processed and used to calculate risk metrics. This feedback loop enables precise risk assessment by continuously refining the evaluation based on actual user inputs, while the automated processing reduces the time required compared to manual analysis.

Inventive Principle:
Principle #23Feedback

3Reliability

If multiple risk assessment queries are processed, then reliability of risk assessment is improved, but processing complexity increases

Engineering Contradiction:
Improverisk assessment reliabilityVSAvoidprocessing complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

Multiple risk assessment queries are merged into a unified processing framework where individual query responses are aggregated to calculate overall risk metrics. This merging approach maintains reliable comprehensive risk assessment by considering multiple factors, while the systematic aggregation method simplifies processing complexity compared to handling each query independently.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS8572749B2Information security control self assessment
Publication Date: 2013.10.29 BANK OF AMERICA CORP
  • US8572749B2 patent drawing
  • US8572749B2 patent drawing
  • US8572749B2 patent drawing

AI summary

Apparatuses, computer readable media, methods, and systems are described for identifying risk assessment queries for assessing risk of a process, providing the identified risk assessment queries to a client device for presentation, receiving response data from the client device comprising responses to the risk assessment queries, determining response values for at least some of the risk assessment queries based on the received response data, and calculating a process risk metric based on the determined response values.