US 12,225,033 B1Granted

Controlling or auditing compliance

AssigneeWells Fargo Bank, N.A.

InventorsChalam Peddada, Eric Schaust, Dhanesh Babu

Life of this patent

Estimating the term…

Loading patent…

Abstract

Artificial intelligence and machine learning systems provide collection and correlation between publicly available regulatory and technology industry framework authoritative sources for proactive operational risk management, guidance, and regulatory obligation adherence. These systems can employ artificial intelligence techniques such as Robotic Process Automation, Natural Language Processing, Explication, Statistical Data Aggregation, Heuristics, and Machine Learning algorithms to perform analysis using machine understanding to identify assets or policies that warrant closer human scrutiny for governance, risk and compliance.

Claims11

Dependent claims

A compliance monitoring platform, comprising:

a plurality of internal assets of an enterprise, each of the plurality of internal assets being subject to at least one compliance standard;
a computing device including a processor and a memory, the memory storing instructions which, when executed, cause the computing device to:
collect a plurality of publicly available authoritative sources including:
a set of regulatory compliance rules;
and
cyber threat intelligence information;
collect a plurality of internal policies corresponding to the plurality of internal assets, the internal policies including a risk landscape;
align and cross-map the plurality of publicly available authoritative sources, the plurality of internal policies, and the plurality of internal assets;
overlay the set of regulatory compliance rules with the plurality of internal policies;
overlay the cyber threat intelligence information with the risk landscape;
detect a change in at least one of the publicly available authoritative sources, the plurality of internal policies, and the plurality of internal assets;
determine an adequacy of the plurality of internal policies based on the detected change, the overlaying of the set of regulatory compliance rules with the plurality of internal policies, and the overlaying of the cyber threat intelligence information with the risk landscape;
provide guided assistance for the enterprise to maintain conformance with the at least one compliance standard of each of the plurality of internal assets;
generate a compliance check based on the determination of adequacy when any one of the plurality of publicly available authoritative sources is modified;
and
generate an indication of a compliance status for the one of the plurality of internal assets when the one of the plurality of publicly available authoritative sources is modified.

13 more elements

A method comprising:

collecting a plurality of publicly available authoritative sources including:
a set of regulatory compliance rules;
and
cyber threat intelligence information;
collecting a plurality of internal policies corresponding to a plurality of internal assets of an enterprise, the internal policies including a risk landscape;
aligning and cross-map the plurality of publicly available authoritative sources, the plurality of internal policies, and the plurality of internal assets;
overlaying the set of regulatory compliance rules with the plurality of internal policies;
overlaying the cyber threat intelligence information with the risk landscape;
detecting a change in at least one of the plurality of publicly available authoritative sources, the plurality of internal policies, and the plurality of internal assets;
determining an adequacy of the plurality of internal policies based on the detected change, the overlaying of the set of regulatory compliance rules with the plurality of internal policies, and the overlaying of the cyber threat intelligence information with the risk landscape;
providing a guided assistance output for the enterprise to maintain conformance with at least one compliance standard that corresponds to each of the plurality of internal assets;
generating a compliance check based on the adequacy when any one of the plurality of publicly available authoritative sources is modified;
and
generating an indication of a compliance status for the one of the plurality of internal assets when the one of the plurality of publicly available authoritative sources is modified.

11 more elements

Dependencies are inferred from the claim text.