Monitoring and analyzing risk data and risk dispositions

A method comprising:

• receiving, by a computing system, risk data;
• generating, by the computing system and based on an attribute of the risk data and a set of business operation rules applicable to an entity, an issue relating to a violation of the business operation rules by the entity;
• outputting, by the computing system and to an entity computing device operated by a user authorized by the entity, a request for information about the issue that identifies the issue and requires a user of the entity computing device to respond to the issue through a user interface, and wherein to require the user to respond the issue, the processing circuitry causes the entity computing device to present the user interface so that the response to the issue is chosen from options that include:
• an acceptance of the issue,
• an indication that the issue has been resolved, and
• a denial of the issue;
• responsive to outputting the request, receiving, by the computing system, information about the issue from the entity computing device, wherein the information a indicates the chosen option is denial of the issue and includes an explanation authored by the entity that pertains to the attribute of the risk data;
• receiving, by the computing system, information about a risk outcome associated with the issue;
• and
• modifying, by the computing system and based on the information about the issue from the entity computing device and the information about the risk outcome, the set of business operation rules to change circumstances in which the set of business operation rules identify issues.

A non-transitory computer-readable storage medium comprising instructions that, when executed, configure processing circuitry of a computing system to:

• receive risk data;
• generate, based on an attribute of the risk data and a set of business operation rules applicable to an entity, an issue relating to a violation of the business operation rules by the entity;
• output, to an entity computing device operated by a user authorized by the entity, a request for information about the issue that identifies the issue and requires a user of the entity computing device to respond to the issue through a user interface, and wherein to require the user to respond the issue, the processing circuitry causes the entity computing device to present the user interface so that the response to the issue is chosen from options that include:
• an acceptance of the issue,
• an indication that the issue has been resolved, and
• a denial of the issue;
• responsive to outputting the request, receive information about the issue from the entity computing device, wherein the information a indicates the chosen option is denial of the issue and includes an explanation authored by the entity that pertains to the attribute of the risk data;
• receive information about a risk outcome associated with the issue;
• and
• modify, based on the information about the issue from the entity computing device and the information about the risk outcome, the set of business operation rules to change circumstances in which the set of business operation rules identify issues.