System and method for information risk management

An apparatus for managing risk associated with information access in a system, the apparatus including a processor executing instructions stored in memory to provide:

• an access request monitoring unit receiving information access requests for accessing a database;
• a user interface unit receiving a plurality of filtering criteria from a user;
• a policy storage unit storing risk policies for assessing risks associated with the information access requests;
• a non-volatile computer-readable memory unit storing the information access requests;
• and
• a controller calculating the risks associated with each information access request, receive by the access request monitoring unit, by applying the risk policies, retrieved from the policy storage unit, to each information access request,
• wherein
• if there is a calculated risk that exceeds a user-set threshold, then the controller generates a report by using the plurality of filtering criteria, received by the user interface unit, to retrieve the information access requests, from the non-volatile computer-readable memory unit, related to the calculated risk, and creates a template by saving the plurality of filtering criteria,
• if the information access requests are directed to a database, then the calculated risk is high if one of the following occurs, (1) an information access request rate to the database is high, and (2) an access failure rate from an access port is high,
• if the information access requests are from users, then
• the calculated risk is performance risk associated with each information access requests and calculated according to risk policies retrieved from the non-volatile computer-readable memory unit,
• the performance risk is calculated by comparing a response time for the information access request with a response time from the risk policies, and
• an alert is issued if the calculated risk is high.