System and Method for Governance, Risk, and Compliance Management
AssigneeComputer Associates Think, Inc.
InventorsMurali Swaminathan, David Israel, Poornima T. Ramarao
Life of this patent
Estimating the term…
Abstract
A method for governance, risk, and compliance management may include at a user interface, enabling a user to define a project template including a list of related controls, one or more control templates, and a testing project configuration (“TPC”) file for each control of a plurality of controls. The user may initiate a testing project by selecting the project template. The method may further include, in response to selection of the project template, at the one or more processors, automatically generating a list of tasks to be performed to test the related controls and automatically outputting the list of tasks.
Claims21
A method for governance, risk, and compliance management, comprising:
- at a user interface, enabling a user to:
- record a plurality of controls in a memory coupled to one or more processors, each control comprising a measure implemented by an organization to achieve one or more goals of the organization;
- for each control of the plurality of controls, define a testing project configuration (“TPC”) file, each control's TPC file including testing information specific to that control;
- define a project template comprising a list of related controls to be tested as part of a testing project;
- define one or more control templates, each comprising a list of one or more tasks to be performed to test a particular type of control;
- record each control's TPC file, the project template, and the one or more control templates in the memory;
- and
- initiate the testing project to test the related controls by selecting the project template;
- and
- at the one or more processors, in response to selection of the project template:
- automatically generating a list of tasks to be performed to test the related controls;
- and
- automatically outputting the list of tasks.
A system for governance, risk, and compliance management, comprising a user interface and one or more processors coupled to a memory, wherein:
- the user interface, once accessed by a user, enables the user to:
- record a plurality of controls in the memory, each control comprising a measure implemented by an organization to achieve one or more goals of the organization;
- for each control of the plurality of controls, define a testing project configuration (“TPC”) file, each control's TPC file including testing information specific to that control;
- define a project template comprising a list of related controls to be tested as part of a testing project;
- define one or more control templates, each comprising a list of one or more tasks to be performed to test a particular type of control;
- record each control's TPC file, the project template, and the one or more control templates in the memory;
- and
- initiate the testing project to test the related controls by selecting the project template;
- and
- the one or more processors are operable in response to selection of the project template to:
- automatically generate a list of tasks to be performed to test the related controls;
- and
- automatically output the list of tasks.
Logic tangibly encoded on a computer readable medium executable by a computer system comprising a user interface and one or more processors coupled to a memory, the logic operable when executed by the computer system to:
- at the user interface, enable a user to:
- record a plurality of controls in the memory, each control comprising a measure implemented by an organization to achieve one or more goals of the organization;
- for each control of the plurality of controls, define a testing project configuration (“TPC”) file, each control's TPC file including testing information specific to that control;
- define a project template comprising a list of related controls to be tested as part of a testing project;
- define one or more control templates, each comprising a list of one or more tasks to be performed to test a particular type of control;
- record each control's TPC file, the project template, and the one or more control templates in the memory;
- and
- initiate the testing project to test the related controls by selecting the project template;
- and
- enable the one or more processors to, in response to selection of the project template:
- automatically generate a list of tasks to be performed to test the related controls;
- and
- automatically output the list of tasks.
Dependencies are inferred from the claim text.