# US 2013/0159050 A1 · Methods and Systems for Managing Corporate Risk

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2013/0159050 A1
- Document ID: US20130159050A1
- Status: Published application
- Kind: A1
- Application number: 13/692,614
- Filed: 2012-12-03
- Published: 2013-06-20
- Earliest claimed: 2011-12-02
- Assignees: Tailored Solutions and Consulting, Inc.
- Inventors: Sean Doherty; Natalie Lehr-Lopez; Mark Lopes; Michael Princi; Michael Rossi; Gabe Ruth; Patrick Murray
- Web page: https://patentgrep.com/patent/US20130159050A1

## CPC

- G06Q 10/0635: Risk analysis of enterprise or organisation activities
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

Methods and systems for facilitating transactions are disclosed. A method for identifying corporate risk, implemented on a computer system, includes obtaining corporate data on computer-readable media, the corporate data comprising at least one of internal data and external data, obtaining behavioral corporate data from the corporate data on computer-readable media, the behavioral corporate data comprising at least one event data point, obtaining data indicative of risk-creating behavior from the behavioral corporate data on computer-readable media by evaluating the corporate data against a knowledge-base of characteristic risk-creating behavior, and communicating the data indicative of risk-creating behavior to a user as threat vectors with at least one dimension, the threat vectors displayed on a graphical user interface.

## Claims

### Claim 1

A method for identifying corporate risk, implemented on a computer system, the method comprising:
obtaining corporate data on computer-readable media, the corporate data comprising at least one of quantifiable internal data and external data;
obtaining behavioral corporate data from the corporate data on computer-readable media, the behavioral corporate data comprising at least one event data point;
obtaining data indicative of risk-creating behavior from the behavioral corporate data on computer-readable media by evaluating the corporate data against a knowledge-base of characteristic risk-creating behavior; and
providing an output showing the data indicative of risk-creating behavior to a user as threat vectors with at least one dimension, the threat vectors displayed on a graphical user interface.

### Claim 2 (depends on 1)

The method for identifying corporate risk of claim 1, wherein the internal data comprises data generated by existing corporate business processes and technology systems.

### Claim 3 (depends on 1)

The method for identifying corporate risk of claim 1, wherein each of the at least one event data point comprises at least one categorical variable, the at least one categorical variable comprising at least one of an actors variable, an actions variable and an attendant characteristics variable.

### Claim 4 (depends on 1)

The method for identifying corporate risk of claim 1, wherein the at least one dimension pertains to at least one of a source of a threat, a nature of a threat and a potential effect of a threat.

### Claim 5 (depends on 4)

The method for identifying corporate risk of claim 4, wherein a dimension pertaining to a source of a threat indicates whether the threat is internal or external.

### Claim 6 (depends on 4)

The method for identifying corporate risk of claim 4, wherein a dimension pertaining to a nature of a threat indicates whether the threat is physical or virtual.

### Claim 7 (depends on 4)

The method for identifying corporate risk of claim 4, wherein a dimension pertaining to a potential effect of a threat indicates whether the threat is a threat to innovation, a threat to execution or a threat to reputation.

### Claim 8

A computer system for identifying corporate risk, adapted to perform the steps of:
obtaining corporate data on computer-readable media, the corporate data comprising at least one of quantifiable internal data and external data;
obtaining behavioral corporate data from the corporate data on computer-readable media, the behavioral corporate data comprising at least one event data point;
obtaining data indicative of risk-creating behavior from the behavioral corporate data on computer-readable media by evaluating the corporate data against a knowledge-base of characteristic risk-creating behavior; and
communicating the data indicative of risk-creating behavior to a user as threat vectors with at least one dimension, the threat vectors displayed on a graphical user interface.

### Claim 9 (depends on 8)

The computer system for identifying corporate risk of claim 8, wherein the internal data comprises data generated by existing corporate business processes and technology systems.

### Claim 10 (depends on 8)

The computer system for identifying corporate risk of claim 8, wherein each of the at least one event data point comprises at least one categorical variable, the at least one categorical variable comprising at least one of an actors variable, an actions variable and an attendant characteristics variable.

### Claim 11 (depends on 8)

The computer system for identifying corporate risk of claim 8, wherein the at least one dimension pertains to at least one of a source of a threat, a nature of a threat and a potential effect of a threat.

### Claim 12 (depends on 8)

The computer system for identifying corporate risk of claim 8, wherein a dimension pertaining to a source of a threat indicates whether the threat is internal or external.

### Claim 13 (depends on 8)

The computer system for identifying corporate risk of claim 8, wherein a dimension pertaining to a nature of a threat indicates whether the threat is physical or virtual.

### Claim 14 (depends on 13)

The computer system for identifying corporate risk of claim 13, wherein a dimension pertaining to a potential effect of a threat indicates whether the threat is a threat to innovation, a threat to execution or a threat to reputation.