Managing and monitoring continuous improvement in detection of compliance violations

A data processing system for auditing a distributed computing environment in which a plurality of entities has identity accounts which allow access to protected resources in the environment, comprising:

• a bus;
• a storage device connected to the bus, wherein the storage device contains computer usable code;
• and
• a processing unit connected to the bus, wherein the processing unit executes the computer usable code to collect data associated with an identity account in a plurality of identity accounts, wherein the data comprises personal data about an entity associated with the identity account and at least one of compliance data associated with at least one activity performed by a user entity associated with the identity account, or prior compliance violation data associated with the at least one activity performed by the user entity associated with the identity account;
• determine a risk factor for the identity account based on the collected data;
• calculate a risk score of the identity account based on the determined risk factor;
• and audit the identity account for compliance to a policy, wherein the identity account is audited with a respective frequency according to the risk score calculated for the identity account, wherein each of the plurality of identify accounts are audited at a respective frequency according to their own respective risk score calculated for their own respective identity account, wherein the personal data includes social media data that comprise connections or links to other entities with known prior compliance violations.

A computer program product for auditing a distributed computing environment in which a plurality of entities has identity accounts which allow access to protected resources in the environment, comprising:

• a tangible computer readable storage device having computer readable program code stored thereon, the computer readable program code for execution by a computer, comprising:
• computer readable program code for collecting data associated with an identity account in a plurality of identity accounts, wherein the data comprises personal data about an entity associated with the identity account and at least one of compliance data associated with at least one activity performed by a user entity associated with the identity account, or prior compliance violation data associated with the at least one activity performed by the user entity associated with the identity account;
• computer readable program code for determining a risk factor for the identity account based on the collected data;
• computer readable program code for calculating a risk score of the identity account based on the determined risk factor;
• and
• computer readable program code for auditing the identity account for compliance to a policy, wherein the identity account is audited with a respective frequency according to the risk score calculated for the identity account, wherein each of the plurality of identify accounts are audited at a respective frequency according to their own respective risk score calculated for their own respective identity account, wherein the personal data includes social media data that comprise connections or links to other entities with known prior compliance violations.

A computer program product for auditing a distributed computing environment in which a plurality of entities has identity accounts which allow access to protected resources in the environment, comprising:

• a tangible computer readable storage device having computer readable program code stored thereon, the computer readable program code for execution by a computer, comprising:
• computer readable program code for collecting data associated with an identity account in a plurality of identity accounts, wherein the data comprises personal data about an entity associated with the identity account and at least one of compliance data, or prior compliance violation data;
• computer readable program code for determining a risk factor for the identity account based on the collected data;
• computer readable program code for calculating a risk score of the identity account based on the determined risk factor;
• and
• computer readable program code for auditing the identity account for compliance to a policy, wherein the identity account is audited with a frequency according to the risk score calculated for the identity account, wherein the personal data includes human resources data or social media data, wherein the social media data comprises connections or links to other entities with known prior compliance violations.