# US 2022/0035908 A1 · Risk classification of information technology change requests

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2022/0035908 A1
- Document ID: US20220035908A1
- Status: Published application
- Kind: A1
- Application number: 17/278,726
- Filed: 2018-09-30
- Published: 2022-02-03
- Earliest claimed: 2018-09-30
- Assignees: Micro Focus LLC
- Applicants: Micro Focus LLC
- Inventors: Hao HUANG; Jin WANG; Jan STEUBE; Nai-Long WEN; Zhen CUI
- Web page: https://patentgrep.com/patent/US20220035908A1

## CPC

- G06F 21/55: Detecting local intrusion or implementing counter-measures
- G06Q 10/06375: {Prediction of business process outcome or impact based on a proposed change}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

A computing device includes a processor and a machine-readable storage medium storing instructions. The instructions are executable by the processor to: receive input data defining an information technology (IT) change request; in response to a receipt of the input data, perform a first risk classification of the IT change request using a decision tree model; generate a graphical user interface based on the first risk classification, the graphical user interface indicating risk impacts for each of a plurality of request features, and the graphical user interface including a graphic representation of the decision tree model; in response to a user modification to a first request feature of the plurality of request features in the graphical user interface, automatically perform a second request analysis using the decision tree model; and automatically update the graphical user interface based on the second request analysis.

## Claims

### Claim 1

A computing device comprising:
a hardware processor; and
a machine-readable storage medium storing instructions, the instructions executable by the hardware processor to:
receive input data defining an information technology (IT) change request;
in response to a receipt of the input data, perform a first risk classification of the IT change request using a decision tree model;
generate a graphical user interface based on the first risk classification, the graphical user interface indicating risk impacts for each of a plurality of request features, and the graphical user interface including a graphic representation of the decision tree model;
in response to a user modification to a first request feature of the plurality of request features in the graphical user interface, automatically perform a second request analysis using the decision tree model; and
automatically update the graphical user interface based on the second request analysis.

### Claim 2 (depends on 1)

The computing device of claim 1, wherein the instructions are executable by the hardware processor to:
generate the decision tree model using historical request information from a request database.

### Claim 3 (depends on 2)

The computing device of claim 2, wherein the instructions are executable by the hardware processor to:
prior to a generation of the trained decision tree mode:
obtain a plurality of request data files from a plurality of change management systems, each of the plurality of request data files having a unique data format; and
reformat the plurality of request data files into a single data format used by the request database.

### Claim 4 (depends on 1)

The computing device of claim 1, wherein the graphical user interface includes:
indications of suggested actions to reduce the overall risk score of the IT change request; and
an overall risk score of the IT change request.

### Claim 5 (depends on 4)

The computing device of claim 4, wherein:
the graphical user simultaneously includes a first portion, a second portion, a third portion, and fourth portion;
the risk impacts of the plurality of request features are included in the first portion;
the graphic representation of the decision tree model is included in the second portion;
the indications of suggested actions are included in the third portion; and
the overall risk score is included in the fourth portion.

### Claim 6 (depends on 4)

The computing device of claim 4, wherein the instructions are executable by the hardware processor to:
in response to a detection of a cursor placed over an indication of a first suggested action without clicking, temporarily update the graphical user interface to reflect results of completing the first suggested action only while the cursor remains over the indication of the first suggested action.

### Claim 7 (depends on 1)

The computing device of claim 1, wherein the instructions are executable by the hardware processor to:
perform the first risk classification by traversing the decision tree model, wherein non-leaf nodes of the decision tree model correspond to attribute tests, and wherein leaf nodes of the decision tree model correspond to risk class labels.

### Claim 8

A method for generating a graphical user interface, comprising:
receiving, using a processor, an indication of an information technology (IT) change request;
performing, using the processor, a first risk classification of the IT change request using a decision tree model;
generating, using the processor, the graphical user interface based on the first risk classification, the graphical user interface indicating risk impacts for each of a plurality of request features;
receiving, in the graphical user interface, a user modification to a first request feature of the plurality of request features; and
in response to the user modification, automatically performing a second request analysis using the decision tree model.

### Claim 9 (depends on 8)

The method of claim 8, further comprising:
automatically performing a change to an IT system based on the IT change request, wherein the change is at least one of a hardware modification and a software modification, wherein the change is based on the first request feature.

### Claim 10 (depends on 8)

The method of claim 8, further comprising:
automatically updating the graphical user interface based on the second request analysis.

### Claim 11 (depends on 8)

The method of claim 8, further comprising:
obtaining historical information from a plurality of change management systems; and
training the decision tree model using the historical change management information.

### Claim 12 (depends on 11)

The method of claim 11, wherein the graphical user interface simultaneously includes:
a first interface portion including the risk impacts of the plurality of request features;
a second interface portion including a graphic representation of the decision tree model; and
a third interface portion including indications of suggested actions to reduce a risk score of the IT change request.

### Claim 13 (depends on 8)

The method of claim 8, further comprising:
performing the first risk classification by traversing the decision tree model, wherein non-leaf nodes of the decision tree model correspond to attribute tests, and wherein leaf nodes of the decision tree model correspond to risk class labels.

### Claim 14 (depends on 8)

The method of claim 8, wherein the graphical user interface includes a plurality of selectable controls, each selectable control to modify an associated request feature of the plurality of request features.

### Claim 15

An article comprising a non-transitory machine-readable storage medium storing instructions that upon execution cause a processor to:
receive an indication of a change request regarding an information technology (IT) system;
perform a first risk classification of the change request using a decision tree model;
generate a graphical user interface based on the first risk classification, the graphical user interface indicating risk impacts for each of a plurality of request features; and
in response to a user modification to at least one request feature of the plurality of request features, automatically perform a second request analysis using the decision tree model.

### Claim 16 (depends on 15)

The article of claim 15, the instructions executable by the processor to:
automatically update the graphical user interface based on the second request analysis.

### Claim 17 (depends on 15)

The article of claim 15, the instructions executable by the processor to:
obtain historical information from a plurality of change management systems; and
perform training using the historical change management information to generate the decision tree model.

### Claim 18 (depends on 17)

The article of claim 17, wherein the historical information is based on a plurality of completed change requests.

### Claim 19 (depends on 18)

The article of claim 18, wherein the training is based at least in part on expert review of the plurality of completed change requests.

### Claim 20 (depends on 15)

The article of claim 15, wherein the graphical user interface includes a graphic representation of the decision tree model.