# US 2026/0100967 A1 · Tracking and network risk management of information technology assets and systems > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2026/0100967 A1 - Document ID: US20260100967A1 - Status: Published application - Kind: A1 - Application number: 19/327,459 - Filed: 2025-09-12 - Published: 2026-04-09 - Earliest claimed: 2024-10-03 - Assignees: JPMorgan Chase Bank, N.A. - Applicants: JPMorgan Chase Bank, N.A. - Inventors: Julie Christine Zwayer; Philip J. McCall; Tarun Shukla; Felix Glazer; Dean Ralph; Kathleen Cebulka; Stephen Marchiano; Kasipathi Bendalam; Kasi Ammu - Web page: https://patentgrep.com/patent/US20260100967A1 ## CPC - H04L 63/1433: {Vulnerability analysis} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Apparatus is provided including a risk management processing circuit, a control circuit, and assessment data storage. The risk assessment processing circuit is configured to access network element key features, and configured to provide, based at least in part on the accessed key features, assessment data associated with at least select ones of network elements forming a given managed information technology network. The control circuit is configured to cause controls pertaining to at-risk network elements to be placed on the network in accordance with the assessment data. The assessment data storage is configured to hold the assessment data associated with the assessed network elements. ## Claims ### Claim 1 Apparatus comprising: a risk assessment processing circuit configured to access network element key features, and configured to provide, based at least in part on the accessed key features, assessment data associated with at least select ones of network elements forming a given managed information technology network, wherein the risk assessment processing circuit is configured to, for each select network element among plural network elements in the network: (i) access key features pertinent to a set of risk types, (ii) determine an impact score for each of the risk types, (iii) determine an overall score for each of the risk types, and (iv) convert the overall score for each of the risk types to a risk level, and determine the assessment data to include the risk levels converted from the overall scores; a control circuit configured to cause controls pertaining to at risk network elements to be placed on the network in accordance with the assessment data; and assessment data storage configured to hold the assessment data associated with the assessed network elements. ### Claim 2 (depends on 1) The apparatus according to claim 1, wherein the risk assessment processing circuit is further configured to, for each select network element among plural network elements in the network, (v) access key features pertinent to environment factor adjustment for each risk type, (vi) determine an environmental factor adjustment score for respective risk types of at least a subset of the set of risk types, wherein the determined overall score for a given risk type from among each of the risk types is determined based on both the impact score for the given risk type and the environmental factor adjustment score for the given risk type. ### Claim 3 (depends on 1) The apparatus according to claim 1, wherein the risk assessment processing circuit is further configured to, for each select network element among plural network elements in the network, (vii) apply minimum risk levels for a given risk type when select accessed key features were utilized to determine a level for the given risk type. ### Claim 4 (depends on 3) The apparatus according to claim 3, wherein the network elements comprise core and non-core assets of the network. ### Claim 5 (depends on 1) The apparatus according to claim 1, wherein the assessment data comprises, per assessed network element, feature data representing confidentiality risk type levels. ### Claim 6 (depends on 1) The apparatus according to claim 1, wherein the assessment data comprises, per assessed network element, feature data representing integrity risk type levels. ### Claim 7 (depends on 1) The apparatus according to claim 1, wherein the assessment data comprises, per assessed network element, feature data representing availability risk type levels. ### Claim 8 (depends on 1) The apparatus according to claim 1, wherein the assessment data comprises, per assessed network element, feature data representing overall risk levels. ### Claim 9 (depends on 1) The apparatus according to claim 1, wherein the assessment data comprises, per assessed network element, feature data representing confidentiality, integrity, availability, and overall risk levels. ### Claim 10 (depends on 9) The apparatus according to claim 9, wherein the risk assessment processing circuit is configured to assess a given core asset comprising an application. ### Claim 11 (depends on 10) The apparatus according to claim 10, wherein the application comprises a general ledger application configured to carry out accounting and bookkeeping for an organization, wherein when the general ledger application is assessed by the assessment processing circuit to have a high overall risk level, wherein the assessment processing circuit is configured to designate assessment data for the general ledger application to also correspond to a server on which the general ledger application is being run. ### Claim 12 (depends on 11) The apparatus according to claim 11, wherein the assessment processing circuit is configured to determine that the overall risk rating for a given network element is critical when any one of the confidentiality, integrity, and availability risk ratings for the given network element is critical. ### Claim 13 (depends on 1) The apparatus according to claim 1, further comprising a key feature processor configured to obtain key features from one or more systems of records of the organization, wherein a key feature is a value or value set for an attribute of a given information technology asset, and configured to provide the obtained key features required for risk assessment by the risk assessment circuit of a given individual or plural set of network elements. ### Claim 14 (depends on 1) The apparatus according to claim 1, further comprising an adjustment processing circuit configured to adjust one or more attributes of the key attributes. ### Claim 15 (depends on 14) The apparatus according to claim 14, wherein the adjustment processing circuit is configured to add geopolitical event data as an added key attribute and associated feature. ### Claim 16 (depends on 1) The apparatus according to claim 1, further comprising a data change determiner and a data change processing circuit, wherein the data change determiner is configured to determine when a relevant data change has occurred since a last assessment relevant to risk assessment by the risk assessment circuit. ### Claim 17 (depends on 16) The apparatus according to claim 16, wherein the data change determiner is configured to determine a relevant data change from an external source external to the given managed information technology network. ### Claim 18 (depends on 16) The apparatus according to claim 16, wherein the data change determiner is configured to determine a relevant data change from feedback input from the controls circuit when the controls circuit determines that a given application should be upgraded to a critical rating as a result of a vulnerability scan. ### Claim 19 A method comprising: accessing, by a risk assessment processing circuit, network element key features, and providing, by the risk assessment processing circuit, based at least in part on the accessed key features, assessment data associated with at least select ones of network elements forming a given managed information technology network, wherein, for each select network element among plural network elements in the network: (i) key features are accessed pertinent to a set of risk types, (ii) impact score is determined for each of the risk types, (iii) an overall score is determined for each of the risk types, and (iv) the overall score is determined for each of the risk types to a risk level, and the assessment data is determined to include the risk levels converted from the overall scores; causing, by a control circuit, controls pertaining to at risk network elements to be placed on the network in accordance with the assessment data; and holding, in assessment data storage, the assessment data associated with the assessed network elements. ### Claim 20 A non-transitory computer-readable media encoded to cause: accessing, by a risk assessment processing circuit, network element key features, and providing, by the risk assessment processing circuit, based at least in part on the accessed key features, assessment data associated with at least select ones of network elements forming a given managed information technology network, wherein, for each select network element among plural network elements in the network: (i) key features are accessed pertinent to a set of risk types, (ii) impact score is determined for each of the risk types, (iii) an overall score is determined for each of the risk types, and (iv) the overall score is determined for each of the risk types to a risk level, and the assessment data is determined to include the risk levels converted from the overall scores; causing, by a control circuit, controls pertaining to at risk network elements to be placed on the network in accordance with the assessment data; and holding, in assessment data storage, the assessment data associated with the assessed network elements.