System and Method for Governance, Risk, and Compliance Management
AssigneeComputer Associates Think, Inc.
InventorsChristopher S. Boswell, John D. Benton
Life of this patent
Estimating the term…
Abstract
A method for governance, risk, and compliance management includes, at a user interface, enabling a user to define a plurality of goals of an organization. The method further includes at the user interface, enabling the user to input a plurality of controls, each control comprising a measure implemented by the organization to achieve one or more of the plurality of goals of the organization and input linking information that links each of the plurality of controls to the one or more of the plurality of goals for which it was implemented. The method further includes at one or more processors coupled to a memory, storing the plurality of goals, the plurality of controls, and the linking information in the memory.
Claims25
A method for governance, risk, and compliance management, comprising:
- at a user interface, enabling a user to:
- define a plurality of goals of an organization, the plurality of goals comprising a first goal of achieving business objective of the organization, a second goal of satisfying a requirement imposed upon the organization, and a third goal of mitigating a risk that threatens the organization;
- input a plurality of controls, each control comprising a measure implemented by the organization to achieve one or more of the plurality of goals of the organization;
- and
- input linking information that links each of the plurality of controls to the one or more of the plurality of goals for which it was implemented;
- and
- at one or more processors coupled to a memory, storing the plurality of goals, the plurality of controls, and the linking information in the memory.
A system for governance, risk, and compliance management, comprising a user interface and one or more processors coupled to a memory, wherein:
- the user interface, once accessed by a user, enables the user to:
- define a plurality of goals of an organization, the plurality of goals comprising a first goal of achieving business objective of the organization, a second goal of satisfying a requirement imposed upon the organization, and a third goal of mitigating a risk that threatens the organization;
- input a plurality of controls, each control comprising a measure implemented by the organization to achieve one or more of the plurality of goals of the organization;
- and
- input linking information that links each of the plurality of controls to the one or more of the plurality of goals for which it was implemented;
- and
- the one or more processors are operable to store the plurality of goals, the plurality of controls, and the linking information in the memory.
Logic tangibly encoded on a computer readable medium executable by a computer system comprising a user interface and one or more processors coupled to a memory, the logic operable when executed by the computer system to:
- at the user interface, enable a user to:
- define a plurality of goals of an organization, the plurality of goals comprising a first goal of achieving business objective of the organization, a second goal of satisfying a requirement imposed upon the organization, and a third goal of mitigating a risk that threatens the organization;
- input a plurality of controls, each control comprising a measure implemented by the organization to achieve one or more of the plurality of goals of the organization;
- and
- input linking information that links each of the plurality of controls to the one or more of the plurality of goals for which it was implemented;
- and
- enable the one or more processors to store the plurality of goals, the plurality of controls, and the linking information in the memory.
Dependencies are inferred from the claim text.