Dynamic risk structure creation systems and/or methods of making the same

A governance, risk management, and compliance (GRC) computer system comprising:

• a user interface configured to receive user input;
• a storage system configured to store an extended risk meta-model for an organization that includes at least one object element, a plurality of dynamic risk elements, and a plurality of dynamic control elements;
• and
• a processing system that includes at least one processor, the processing system configured to:
• load the extended risk meta-model from the storage system;
• add the at least one object element to a new dynamic risk model based on user provided input and the extended risk meta-model;
• add a first dynamic risk element from the plurality of dynamic risk elements to the new dynamic risk model based on user provided input and the extended risk meta-model;
• determine a risk type of the first dynamic risk element based on user provided input;
• link the added first dynamic risk element to the added at least one object element based on a first relationship that is defined in the extended risk meta-model;
• add a first dynamic control element from the plurality of dynamic control elements to the new dynamic risk model based on user provided input and the extended risk meta-model;
• determine a control type of the first dynamic control element based on user provided input;
• and
• link the added first dynamic control element to the added first dynamic risk element based on a second relationship that is defined in the extended risk meta-model.

A computer implemented method of creating a dynamic risk model from an extended risk meta-model on a GRC computer system that includes at least one processor, the extended risk meta-model, which is based on a fixed base meta-model, includes at least one object element, a plurality of dynamic risk elements, and a plurality of dynamic control elements, the method comprising:

• receiving input provided by a user of the GRC computer system;
• loading the extended risk meta-model from a storage system of the GRC computer system;
• adding the at least one object element to a new dynamic risk model based on the received input and the extended risk meta-model;
• adding a first dynamic risk element from the plurality of dynamic risk elements to the new dynamic risk model based on the received input and the extended risk meta-model;
• determining, via the at least one processor of the GRC computer system, a risk type of the first dynamic risk element based on the received input;
• linking, via the at least one processor of the GRC computer system, the added first dynamic risk element to the added at least one object element based on a first relationship defined in the extended risk meta-model;
• adding a first dynamic control element from the plurality of dynamic control elements to the new dynamic risk model based on the received input and the extended risk meta-model;
• determining, via the at least one processor of the GRC computer system, a control type of the first dynamic control element based on the received input;
• and
• linking, via the at least one processor of the GRC computer system, the added first dynamic control element to the added first dynamic risk element based on a second relationship that is defined in the extended risk meta-model.