# US 2018/0322696 A1 · Dynamic risk structure creation systems and/or methods of making the same > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0322696 A1 - Document ID: US20180322696A1 - Status: Published application - Kind: A1 - Application number: 16/031,770 - Filed: 2018-07-10 - Published: 2018-11-08 - Earliest claimed: 2013-03-15 - Assignees: Bwise B.V. - Applicants: Bwise B.V. - Inventors: Luc BRANDTS; Erik M.M. VOORBRAAK; Gerrit Hendrik SMIT - Web page: https://patentgrep.com/patent/US20180322696A1 ## CPC - G06T 17/10: Constructive solid geometry [CSG] using solid primitives, e.g. cylinders, cubes - G06Q 10/0635: Risk analysis of enterprise or organisation activities - G06T 11/26: Drawing of charts or graphs - G06T 19/20: Editing of three-dimensional [3D] images, e.g. changing shapes or colours, aligning objects or positioning parts - G06T 2219/2004: Aligning objects, relative positioning of parts - G06T: IMAGE DATA PROCESSING OR GENERATION, IN GENERAL - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract A governance, risk management, and compliance (GRC) computer system is provided that includes at least one processor, a user input device, and a storage system that stores meta-model. The meta-model includes at least one process element, a plurality of dynamic risk elements, and a plurality of dynamic control elements. The risk meta-model is loaded from the storage system. Input is accepted from the user input device for creating a new dynamic risk model based on the loaded extended risk meta-model. At least one process element is added to the new dynamic risk model based on user provided input and the extended risk meta-model. A first dynamic risk element is added from the plurality of dynamic risk elements based on user provided input. A risk type of the first dynamic risk element is determined based on user provided input. ## Claims ### Claim 1 A computer system that provides governance, risk management, or compliance functionality, the computer system comprising: a storage system configured to store an extended risk meta-model for an organization that includes (a) a plurality of object elements, (b) a plurality of dynamic risk elements, and (c) a plurality of dynamic control elements, the extended risk meta-model including a set of enforceable rules, for how dynamic risk models that are based on the extended risk meta-model can be created, the set of enforceable rules including a first relationship constraint and a second relationship constraint that is different from the first relationship constraint a processing system that includes at least one hardware processor, the processing system configured to: receive input for creating a new dynamic risk model based on the extended risk meta-model that is stored in the storage system; as part of the creating the new dynamic risk model, add, based on received input, an object element to the new dynamic risk model that is from the plurality of object elements included in the extended risk meta-model; as part of the creating the new dynamic risk model, add, based on received input, a first dynamic risk element from the plurality of dynamic risk elements of the extended risk meta-model to the new dynamic risk model; based on addition of the first dynamic risk element to the new dynamic risk model, automatically add a first link between the added first dynamic risk element and the added at least one object element, wherein the automatic addition of the first link is controlled based on the first relationship constraint of the extended risk meta-model; as part of the creating the new dynamic risk model, add, based on received input, a first dynamic control element that is from among the plurality of dynamic control elements of the extended risk meta-model, wherein the first dynamic control element includes a plurality of fields; based on addition of the first dynamic control element to the new dynamic risk model, automatically add a second link between the added first dynamic control element and the added first dynamic risk element, wherein the automatic addition of the second link is controlled based on based on the second constraint of the extended risk meta-model; and in response to a determination that a first field of the plurality of fields is set to a predetermined value, control a visibility of a second one of the plurality of fields of the first dynamic control element. ### Claim 2 (depends on 1) The computer system of claim 1, wherein the processing system is further configured to: as part of the creating the new dynamic risk model, add, based on received input, a second dynamic risk element from the plurality of dynamic risk elements to the new dynamic risk model; determine a risk type of the second dynamic risk element; and link the second dynamic risk element to the first dynamic risk element. ### Claim 3 (depends on 1) The computer system of claim 1, wherein at least some of the plurality of fields of the first dynamic control element are settable based on user provided input. ### Claim 4 (depends on 1) The computer system of claim 1, wherein the visibility of a first field of the plurality of fields is further based on a value included in a second field of the plurality of fields of the first dynamic control element. ### Claim 5 (depends on 1) The computer system of claim 1, wherein the processing system is further configured to set a control type of the first dynamic control element based on a value in at least one of the plurality of fields of the first dynamic control element. ### Claim 6 (depends on 1) The computer system of claim 1, wherein the processing system is further configured to control the visibility based on conditional logic included in the extended risk meta-model and a value for a field of the first dynamic risk element. ### Claim 7 (depends on 1) The computer system of claim 1, wherein the processing system is further configured to output, to a display device, the new dynamic risk model in a tree view format. ### Claim 8 (depends on 1) The computer system of claim 1, wherein the extended risk meta-model is based on, via an interface layer of the computer system, a first fixed meta-model, wherein the processing system is further configured to replace, after creation of the new dynamic risk model, the first fixed meta-model with a second, different, fixed meta-model, wherein after replacement of the first fixed meta-model, the previously created dynamic risk model is properly supported via the extended risk meta-model that is now based on, via the interface layer, the second fixed meta-model. ### Claim 9 (depends on 1) The computer system of claim 1, wherein the processing system is further configured to: generate data for a graphical representation of the new dynamic risk model that is to be displayed on a display device, the graphical representation including different graphical elements to represent the first dynamic risk element, first dynamic control element, at least one object element, and the automatically formed links between elements of the new dynamic risk model. ### Claim 10 A computer implemented method of creating a dynamic risk model from an extended risk meta-model using a computer system that provides governance, risk management, and compliance (GRC) functionality, the computer system including at least one processor, the extended risk meta-model including (a) a plurality of object elements, (b) a plurality of dynamic risk elements, and (c) a plurality of dynamic control elements, the extended risk meta-model including a set of enforceable rules for how dynamic risk models that are based on the extended risk meta-model are allowed to be created, the set of enforceable rules including a first relationship constraint and a second relationship constraint that is different from the first relationship constraint, the method comprising: receiving input for creating a new dynamic risk model based on the extended risk meta-model that is stored in the storage system; as part of the creating, adding, based on received input, an object element to the new dynamic risk model that is from the plurality of object elements included in the extended risk meta-model; as part of the creating, adding, based on received input, a first dynamic risk element from the plurality of dynamic risk elements of the extended risk meta-model to the new dynamic risk model; based on addition of the first dynamic risk element to the new dynamic risk model, automatically adding a first link between the added first dynamic risk element and the added at least one object element, wherein the automatic addition of the first link is controlled based on the first relationship constraint of the extended risk meta-model; as part of the creating, adding, based on received input, a first dynamic control element that is from among the plurality of dynamic control elements of the extended risk meta-model, wherein the first dynamic control element includes a plurality of fields; based on addition of the first dynamic control element to the new dynamic risk model, automatically adding a second link between the added first dynamic control element and the added first dynamic risk element, wherein the automatic addition of the second link is controlled based on based on the second constraint of the extended risk meta-model; and in response to a determination that a first field of the plurality of fields is set to a predetermined value, controlling a visibility of a second one of the plurality of fields of the first dynamic control element. ### Claim 11 (depends on 10) The method of claim 10, further comprising: outputting data for a graphical representation of the new dynamic risk model to be displayed on a display device, the graphical representation including different graphical elements to represent the first dynamic risk element, first dynamic control element, at least one object element, and the automatically formed links between elements of the new dynamic risk model. ### Claim 12 (depends on 10) The method of claim 10, further comprising: as part of the creating the new dynamic risk model, adding, based on received input, a second dynamic risk element from the plurality of dynamic risk elements to the new dynamic risk model; determining a risk type of the second dynamic risk element; and linking the second dynamic risk element to the first dynamic risk element. ### Claim 13 (depends on 10) The method of claim 10, wherein at least some of the plurality of fields of the first dynamic control element are settable based on user provided input. ### Claim 14 (depends on 10) The method of claim 10, wherein the visibility of a first field of the plurality of fields is further based on a value included in a second field of the plurality of fields of the first dynamic control element. ### Claim 15 (depends on 10) The method of claim 10, further comprising: setting a control type of the first dynamic control element based on a value in at least one of the plurality of fields of the first dynamic control element. ### Claim 16 (depends on 10) The method of claim 10, further comprising: controlling the visibility based on conditional logic included in the extended risk meta-model and a value for a field of the first dynamic risk element. ### Claim 17 A non-transitory computer readable storage medium storing instructions for execution by a computer system that provides governance, risk management, and compliance (GRC), the computer system including at least one processor and a storage system configured to store an extended risk meta-model for an organization that includes (a) a plurality of object elements, (b) a plurality of dynamic risk elements, and (c) a plurality of dynamic control elements, the extended risk meta-model including a set of enforceable rules, for how dynamic risk models that are based on the extended risk meta-model can be created, the set of enforceable rules including a first relationship constraint and a second relationship constraint that is different from the first relationship constraint, the stored instructions comprising instructions that, when executed by the at least one processor, cause the computer system to: receive input for creating a new dynamic risk model based on the extended risk meta-model that is stored in the storage system; as part of the creating, add, based on received input, an object element to the new dynamic risk model that is from the plurality of object elements included in the extended risk meta-model; as part of the creating, add, based on received input, a first dynamic risk element from the plurality of dynamic risk elements of the extended risk meta-model to the new dynamic risk model; based on addition of the first dynamic risk element to the new dynamic risk model, automatically add a first link between the added first dynamic risk element and the added at least one object element, wherein the automatic addition of the first link is controlled based on the first relationship constraint of the extended risk meta-model; as part of the creating, add, based on received input, a first dynamic control element that is from among the plurality of dynamic control elements of the extended risk meta-model, wherein the first dynamic control element includes a plurality of fields; based on addition of the first dynamic control element to the new dynamic risk model, automatically add a second link between the added first dynamic control element and the added first dynamic risk element, wherein the automatic addition of the second link is controlled based on based on the second constraint of the extended risk meta-model; and in response to a determination that a first field of the plurality of fields is set to a predetermined value, control a visibility of a second one of the plurality of fields of the first dynamic control element. ### Claim 18 (depends on 17) The non-transitory computer readable storage medium of claim 17, wherein the instructions further cause the computer system to: as part of the creating, add, based on received input, a second dynamic risk element from the plurality of dynamic risk elements to the new dynamic risk model; determine a risk type of the second dynamic risk element; and link the second dynamic risk element to the first dynamic risk element. ### Claim 19 (depends on 17) The non-transitory computer readable storage medium of claim 17, wherein the instructions further cause the computer system to automatically control a value of at least one of the plurality fields of the first dynamic control element based on a user provided value for another field of the first dynamic control element. ### Claim 20 (depends on 17) The non-transitory computer readable storage medium of claim 17, wherein the instructions further cause the computer system to automatically control, based on conditional logic that is included in the extended risk meta-model, a value and/or visibility of at least one field of the first dynamic control element based on a value of a field of the first dynamic risk element.