Technical Control Evaluation Program for Software Compliance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Software applications often face issues with compliance due to errors in institutional or regulatory standards, leading to wasted resources and time during development, as these errors are typically identified late in the development phase.
Innovation Solution
A Technical Control Evaluation Program (TCEP) system and method that uses data-driven, observation-based methodologies, including artificial intelligence techniques like neural networks, to evaluate data items such as business requirements documents and regulatory policies, identifying discrepancies and errors early in the development phase and providing remediation recommendations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If software development follows erroneous institutional or regulatory standards, then development can proceed without interruption, but the software application will not function properly or will be non-compliant
Solution Approach 1:
The system performs preliminary evaluation of institutional and regulatory standards against each other and against the software requirements before development begins. By identifying discrepancies and errors in standards early, the system enables corrective action to be taken before the software is built, preventing wasted development effort on non-compliant or erroneous requirements.
Solution Approach 2:
The system continuously monitors and compares institutional standards, regulatory standards, and software requirements, providing feedback on discrepancies and potential non-compliance issues. This feedback mechanism allows developers to adjust their work based on identified errors in standards, ensuring the final software meets both institutional and regulatory requirements.
2Reliability
If compliance checking is performed early in development, then errors can be identified and corrected promptly, but the development process becomes more complex and time-consuming
Solution Approach 1:
The system creates a virtual model or copy of the compliance evaluation framework that can be applied repeatedly to different software projects. This standardized template approach simplifies the evaluation process by providing a consistent methodology that can be automated, reducing the complexity burden while maintaining thorough compliance checking.
Solution Approach 2:
The evaluation system is designed to be universal, handling multiple types of compliance checks (institutional standards, regulatory standards, inter-standard consistency) within a single integrated framework. This multi-functional approach consolidates what would otherwise be separate complex evaluation processes into one unified system.
3Measurement precision
If comprehensive standard evaluation is conducted, then all discrepancies and errors can be identified, but the time and resources required for evaluation increase
Solution Approach 1:
The comprehensive compliance evaluation is divided into distinct segments: evaluation of institutional standards, evaluation of regulatory standards, evaluation of consistency between standards, and evaluation of software requirements against both. This segmentation allows the system to process different aspects of compliance independently and efficiently, improving overall detection accuracy while managing evaluation time through structured progression.
Solution Approach 2:
The system performs preliminary filtering and prioritization of compliance issues based on severity and impact, allowing the most critical discrepancies to be identified and addressed first. This preliminary action enables the system to achieve high measurement precision for the most important compliance aspects without requiring exhaustive review of all minor details, thereby reducing overall evaluation time.
Data Source
AI summary
Various examples described herein are directed to systems and methods that learn to evaluate data items. A computing device receives data items and evaluates the data items. The evaluation performed by the computing device includes comparing a first data item with a second data item and determining a difference between the first data item and the second data item based on the comparison. The computing device also prepares a recommendation based on the difference between the first data item and the second data item and forwards the recommendation to a subject matter expert. The computing device receives an updated recommendation from the subject matter expert that is based on the recommendation. Using the updated recommendation, the computing device refines the comparing and determining operations where the computing device further learns to evaluate the data items by receiving the updated recommendation and refining the comparing and determining operations.