System and Method of Business Risk Based Authorization

A system for authorizing access in a computer system, comprising:

• an access subsystem that is configured to receive, by the computer system from a user, a request to use the computer system,
• wherein the access subsystem is configured to read authorization data associated with the user, and
• wherein the access subsystem is configured to deny the request to use the computer system by the user according to the authorization data;
• a business process risk assessment subsystem that is configured to determine a business process risk associated with the request;
• and
• a risk engine subsystem that is configured to compare a characteristic of the request and the business process risk,
• wherein the risk engine subsystem is configured to authorize the request to use the computer system by the user when the business process risk exceeds the characteristic.

A non-transitory computer readable medium storing instructions to control a computer system for authorizing access in the computer system, comprising:

• an access component that is configured to control the computer system to receive, from a user, a request to use the computer system,
• wherein the access component is configured to control the computer system to read authorization data associated with the user, and
• wherein the access component is configured to control the computer system to deny the request to use the computer system by the user according to the authorization data;
• a business process risk analysis component that is configured to control the computer system to determine a business process risk associated with the request;
• and
• a risk engine component that is configured to control the computer system to compare a characteristic of the request and the business process risk,
• wherein the risk engine component is configured to control the computer system to authorize the request to use the computer system by the user when the business process risk exceeds the characteristic.