Computer implemented live cross walks in compliance mappings in response to regulatory changes and assessing risks of changes

A computing device comprising:

• a processing device;
• a network interface coupled to the processing device to enable communication over a network;
• a storage device coupled to the processing device;
• a mapping engine code stored in the storage device, wherein an execution of the code by the processing device causes the computing device to:
• compare a first version of a regulation in the compliance mapping to a second version of the regulation, the second version being an updated version of the first version;
• identify a change in the second version with respect to the first version, wherein the change is an added control description, a deleted control description, or an updated control description;
• upon determining that the change is an updated control description, analyze the updated control description to determine a type of update;
• reconstruct the mapping of the regulation based on the change and, if the change is an updated control description, based on the type of update, using natural language processing and/or machine learning;
• assess the risk of the reconstructed mapping;
• and
• notify a service owner about the risk of the identified changes.

A non-transitory computer readable storage medium tangibly embodying a computer readable program code having computer readable instructions that, when executed, causes a computing device to reconstruct a compliance mapping due to an update in a regulation in the compliance mapping, by:

• comparing a first version of a regulation in the compliance mapping to a second version of the regulation, the second version being an updated version of the first version;
• identifying a change in the second version with respect to the first version, wherein the change is one of an added control description, a deleted control description, or an updated control description;
• upon determining that the change is an updated control description, analyzing the updated control description to determine a type of update;
• reconstructing the mapping of the regulation based on the change and, if the change is an updated control description, based on the type of update, using natural language processing and/or machine learning;
• assessing a risk of the reconstructed mapping;
• and
• notifying a service owner about the risk of the identified changes.