Data-centric monitoring of compliance of distributed applications

A computer system comprising one or more memories embodying computer-readable code;

• and one or more processors, wherein the computer system performs the following in response to execution by the one or more processors of the computer-readable code:
• monitoring a distributed application using one or more logs of information technology events in a distributed system comprising the distributed application, wherein the distributed application is an application that is executed on multiple computers simultaneously within the distributed system, and wherein the monitoring comprises collecting information technology events by a plurality of components in the distributed application,
• wherein the distributed system comprises a plurality of data objects, and the distributed application uses, processes, or otherwise accesses one or more of the plurality of the data objects, and
• wherein the information technology events concern the distributed application and concern accesses by the distributed application to one or more of the data objects;
• correlating the information technology events with a selected set of the plurality of data objects;
• estimating risks to the selected set of data objects based on the information technology events,
• wherein estimating risks uses at least ranks of compliance rules as these rules apply to the data objects in the system and vulnerability scores of components of the distributed application corresponding to the set of data objects and information technology events,
• wherein the estimated risks include a breach of compliance rules associated with the selected set of data objects, and
• wherein the compliance rules are defined by one or more regulations;
• displaying information allowing a user to determine the estimated risks for the selected set of data objects, wherein the information displayed by the computer system provides the user with an estimated risk of a breach of the regulatory compliance requirements, including user selectable representations of data objects used for data-centric monitoring of compliance applications, and comprising visual indications of the estimated risk for the selected set of data objects, wherein the displayed information allows the user to perform mitigation of the estimated risks for at least one of the selected set of data objects.