Assessment of risk associated with international cross border data movement
AssigneeBank of America Corporation
InventorsTammy Alvarez, Scott Margolis
Life of this patent
Estimating the term…
Abstract
In some embodiments, a data movement system comprises a rules repository configured to store rules associated with regulations of the first jurisdiction and the regulations of the second jurisdiction. A workflow manager is configured to determine jurisdictional complexity of the project as a function of the regulations of the first jurisdiction and the second jurisdiction. The workflow manager is configured to determine jurisdictional exposure of the project as a function of an organization's exposure to the first jurisdiction and the second jurisdiction. The workflow manager is configured to determine the risk of the project as a function of the jurisdictional complexity of the project and the jurisdictional exposure of the project.
Claims20
A data movement system for assessing inherent risk associated with a project that involves moving first data from a first jurisdiction and second data from a second jurisdiction, the system comprising:
- a rules repository configured to store rules associated with the regulations of the first jurisdiction and the regulations of the second jurisdiction;
- and
- a workflow manager comprising a processor and configured to:
- determine jurisdictional complexity of the project as a function of the regulations of the first jurisdiction and the second jurisdiction, wherein the first jurisdiction and the second jurisdiction each have corresponding regulations that restrict the movement of data out of that jurisdiction and wherein at least some portion of the regulations involve data privacy, data secrecy, and data outsourcing;
- determine jurisdictional exposure of the project as a function of an organization's exposure to the first jurisdiction and the second jurisdiction, wherein at least some portion of the organization's exposure involves the organization's volume of business activity in the first jurisdiction and in the second jurisdiction;
- and
- determine the risk of the project as a function of the jurisdictional complexity of the project and the jurisdictional exposure of the project.
A risk assessment computer for assessing inherent risk associated with a project that involves moving first data from a first jurisdiction and second data from a second jurisdiction, the system comprising:
- a processor configured to:
- determine jurisdictional complexity of the project as a function of the regulations of the first jurisdiction and the second jurisdiction, wherein the first jurisdiction and the second jurisdiction each have corresponding regulations that restrict the movement of data out of that jurisdiction and wherein at least some portion of the regulations involve data privacy, data secrecy, and data outsourcing;
- determine jurisdictional exposure of the project as a function of an organization's exposure to the first jurisdiction and the second jurisdiction, wherein at least some portion of the organization's exposure involves the organization's volume of business activity in the first jurisdiction and in the second jurisdiction;
- and
- determine the risk of the project as a function of the jurisdictional complexity of the project and the jurisdictional exposure of the project;
- and
- a memory configured to store:
- a quantitative value representing the risk of the project.
A method for assessing risk for a project that involves moving first data from a first jurisdiction and second data from a second jurisdiction, comprising:
- determining jurisdictional complexity of the project, using a processor, as a function of the regulations of the first jurisdiction and the second jurisdiction, wherein the first jurisdiction and the second jurisdiction each have corresponding regulations that restrict the movement of data out of that jurisdiction and wherein at least some portion of the regulations involve data privacy, data secrecy, and data outsourcing;
- determining jurisdictional exposure of the project, using the processor, as a function of an organization's exposure to the first jurisdiction and the second jurisdiction, wherein at least some portion of the organization's exposure involves the organization's volume of business activity in the first jurisdiction and in the second jurisdiction;
- and
- determining, using the processor, the risk of the project as a function of the jurisdictional complexity of the project and the jurisdictional exposure of the project.
Dependencies are inferred from the claim text.