Historical risk assessment for risk mitigation in online access control

A non-transitory computer-readable storage medium having program code that is executable by a processor device to cause a computing device to perform operations, the operations comprising:

• receiving a request for an assessment of a risk indicator change from a first risk indicator associated with an entity generated at a first time point to a second risk indicator associated with the entity generated at a second time point, wherein the first risk indicator and the second risk indicator are generated based on a plurality of attributes associated with the entity;
• identifying a third time point between the first time point and the second time point for which a third risk indicator associated with the entity has been determined;
• determining a first impact of each attribute of the plurality of attributes on a first risk indicator change from the first risk indicator to the third risk indicator;
• determining a second impact of each attribute of the plurality of attributes on a second risk indicator change from the third risk indicator to the second risk indicator;
• determining a total impact of each attribute of the plurality of attributes on the risk indicator change by aggregating the first impact and the second impact of each attribute;
• generating assessment results comprising a list of attributes selected from the plurality of attributes, the list of attributes ordered according to the respective total impact of the attributes;
• and
• transmitting, to a remote computing device, the assessment results in response to the request for the assessment for use in improving the risk indicator of the entity which is used to control access to one or more interactive computing environments by the entity.

A system comprising:

• a processing device;
• and
• a memory device in which instructions executable by the processing device are stored for causing the processing device to perform operations comprising:
• receiving a request for an assessment of a risk indicator change from a first risk indicator associated with an entity generated at a first time point to a second risk indicator associated with the entity generated at a second time point, wherein the first risk indicator and the second risk indicator are generated based on a plurality of attributes associated with the entity;
• identifying a third time point between the first time point and the second time point for which a third risk indicator associated with the entity has been determined;
• determining a first impact of each attribute of the plurality of attributes on a first risk indicator change from the first risk indicator to the third risk indicator;
• determining a second impact of each attribute of the plurality of attributes on a second risk indicator change from the third risk indicator to the second risk indicator;
• determining a total impact of each attribute of the plurality of attributes on the risk indicator change by aggregating the first impact and the second impact of each attribute;
• generating assessment results comprising a list of attributes selected from the plurality of attributes, the list of attributes ordered according to the respective total impact of the attributes;
• and
• transmitting, to a remote computing device, the assessment results in response to the request for the assessment for use in improving the risk indicator of the entity which is used to control access to one or more interactive computing environments by the entity.