Back to results
US 10,896,211 B2Granted
Methods and systems for a compliance framework database schema
AssigneeUnified Compliance Framework (Network Frontiers)
InventorDorian J. Cougias
Life of this patent
Estimating the term…
Abstract
Generating a compliance framework. The compliance framework facilitates an organization's compliance with multiple authority documents by providing efficient methodologies and refinements to existing technologies, such as providing hierarchical fidelity to the original authority document; separating auditable citations from their context (e.g., prepositions and or informational citations); asset focused citations; SNED and Live values, among others.
Claims19
A non-transitory computer-readable storage medium storing instructions that, when executed by a computing system, cause the computing system to perform operations for increasing the speed at which an audit is performed by extrapolating audit question answers to multiple citations from multiple authority documents, the operations comprising:
- accessing a database stored by a computing system to retrieve a digital data structure, wherein the digital data structure stores correspondences between controls and authority document citations such that, for each of multiple controls, the digital data structure identifies one or more citations to which the control is linked,
- wherein each citation is related to a requirement by specifying a part of a corresponding authority document that defines the requirement to be checked in the audit,
- wherein the digital data structure identifies, for a distinguished control among the multiple controls, multiple citations to which the distinguished control is linked, and
- wherein at least two of the multiple citations identified for the distinguished citation are from different ones of the multiple authority documents;
- initiating the audit for two or more of the multiple authority documents, the audit including posing a single audit question with respect to the distinguished control, wherein the audit includes obtaining a status for each requirement to be checked related to each of the multiple citations from the two or more authority documents;
- receiving an answer to the single audit question posed with respect to the distinguished control;
- and
- in response to receiving the answer to the single audit question and without regard for any other received user input, attributing, in the digital data structure, the received answer to each of the at least two citations to which the distinguished control is linked as the status for the requirement related to that citation,
- wherein the attributions, of the received answer to the single audit question, to the citations to which the distinguished control is linked increases the speed at which the audit is performed by eliminating additional audit questions from being posed for the citations to which the distinguished control is linked.
6 more elements
A computing system for increasing the speed at which an audit is performed by extrapolating audit question answers to multiple citations from multiple authority documents, the computing system comprising:
- one or more processors;
- and
- one or more memories storing instructions that, when executed by the one or more processors, cause the computing system to perform operations comprising:
- accessing a database to retrieve a digital data structure, wherein the digital data structure stores correspondences between controls and authority document citations such that,
- for each of multiple controls, the digital data structure identifies one or more citations to which the control is linked,
- wherein the digital data structure identifies, for a distinguished control among the multiple controls, multiple citations to which the distinguished control is linked,
- wherein at least two of the multiple citations identified for the distinguished citation are from different ones of the multiple authority documents, and
- wherein at least one particular citation, of the one or more citations, was linked in the data structure to a control based on a determined match between parts of the particular citation to parts of the particular control;
- and
- initiating the audit for two or more of the multiple authority documents, the audit including posing an audit question with respect to the distinguished control, wherein the audit includes obtaining a status for each requirement to be checked related to each of the multiple citations from the two or more authority documents;
- wherein an answer to the audit question is attributable, without regard for any other received user input, to each of the citations to which the distinguished control is linked, wherein attributions, of the answer to the audit question, to the citations to which the distinguished control is linked increases the speed at which the audit is performed by eliminating additional audit questions from being posed for the citations to which the distinguished control is linked.
8 more elements
A method comprising:
- accessing a database to retrieve a digital data structure, wherein the digital data structure stores correspondences between controls and authority document citations such that,
- for each of multiple controls, the digital data structure identifies one or more citations to which the control is linked,
- wherein each citation is related to a requirement by specifying a part of a corresponding authority document that defines the requirement to be checked in the audit,
- wherein the digital data structure identifies, for a distinguished control among the multiple controls, multiple citations to which the distinguished control is linked, and
- wherein at least two of the multiple citations identified for the distinguished citation are from different ones of multiple authority documents;
- and
- initiating the audit for two or more of the multiple authority documents, the audit including posing an audit question with respect to the distinguished control, wherein the audit includes obtaining a status for each requirement to be checked related to each of the multiple citations from the two or more authority documents;
- wherein an answer to the audit question is attributable, without regard for any other received user input, to each of the citations to which the distinguished control is linked, wherein attributions, of the answer to the audit question, to the citations to which the distinguished control is linked eliminates additional audit questions from being posed for the citations to which the distinguished control is linked.
5 more elements
A memory storing a database with a digital data structure for access by an application executed by a data processing system, the digital data structure comprising;
- correspondences between controls and authority document citations such that,
- for each of multiple controls, the digital data structure identifies one or more citations to which the control is linked,
- wherein each citation is related to a requirement, specified in part of a corresponding authority document, to be checked in the audit,
- wherein the digital data structure identifies, for a distinguished control among the multiple controls, multiple citations to which the distinguished control is linked, and
- wherein at least two of the multiple citations identified for the distinguished citation are from different ones of multiple authority documents;
- wherein the digital data structure is used in an audit, for two or more of the multiple authority documents, the audit including posing an audit question with respect to the distinguished control, wherein the audit includes obtaining a status for each requirement to be checked related to each of the multiple citations from the two or more authority documents;
- and
- wherein an answer to the audit question is attributable, without regard for any other received user input, to each of the citations to which the distinguished control is linked.
5 more elements
Dependencies are inferred from the claim text.