Abstract: A method, system and computer-usable medium for a policy validator that automates the validation of existing or proposed policies. A segmented questionnaire wizard is implemented to guide a policy creator through a series of policy-related questions, resulting in the automated generation of a questionnaire used for validating the policy. The resulting validation questionnaire is automatically distributed to predetermined subject matter experts and individuals affected by the policy, whose responses are then analyzed and scored by the policy validator to determine the validity of the policy. If the resulting validation score is within a predetermined, acceptable range, the policy is approved and released for implementation. Otherwise, the process is repeated until an acceptable validation score is achieved.

Abstract: A system, and computer usable program product for securing asynchronous client server transactions are provided in the illustrative embodiments. A request including an application identifier and a version of a second application is received at a first application. A service identifier is generated if a session with the second application is valid. A registry is generated at the first application. A catalog is generated based on the registry and the service identifier and the catalog are sent to the second application. A sub-request including the service identifier is received as part of an asynchronous client server transaction. Validity of the sub-request is determined by determining whether the service identifier has expired, whether the sub-request requests a service that is permissible according to the catalog, whether the service identifier is used in conjunction with the second application, or a combination thereof. If the sub-request is valid, the service is provided.

Abstract: A method for securing asynchronous client server transactions is provided in the illustrative embodiments. A request including an application identifier and a version of a second application is received at a first application. A service identifier is generated if a session with the second application is valid. A registry is generated at the first application. A catalog is generated based on the registry and the service identifier and the catalog are sent to the second application. A sub-request including the service identifier is received as part of an asynchronous client server transaction. Validity of the sub-request is determined by determining whether the service identifier has expired, whether the sub-request requests a service that is permissible according to the catalog, whether the service identifier is used in conjunction with the second application, or a combination thereof. If the sub-request is valid, the service is provided.

Abstract: A system, and computer usable program product for securing asynchronous client server transactions are provided in the illustrative embodiments. A request including an application identifier and a version of a second application is received at a first application. A service identifier is generated if a session with the second application is valid. A registry is generated at the first application. A catalog is generated based on the registry and the service identifier and the catalog are sent to the second application. A sub-request including the service identifier is received as part of an asynchronous client server transaction. Validity of the sub-request is determined by determining whether the service identifier has expired, whether the sub-request requests a service that is permissible according to the catalog, whether the service identifier is used in conjunction with the second application, or a combination thereof. If the sub-request is valid, the service is provided.

Abstract: A method for securing asynchronous client server transactions is provided in the illustrative embodiments. A request including an application identifier and a version of a second application is received at a first application. A service identifier is generated if a session with the second application is valid. A registry is generated at the first application. A catalog is generated based on the registry and the service identifier and the catalog are sent to the second application. A sub-request including the service identifier is received as part of an asynchronous client server transaction. Validity of the sub-request is determined by determining whether the service identifier has expired, whether the sub-request requests a service that is permissible according to the catalog, whether the service identifier is used in conjunction with the second application, or a combination thereof. If the sub-request is valid, the service is provided.

Abstract: A system, and computer usable program product for securing asynchronous client server transactions are provided in the illustrative embodiments. A request including an application identifier and a version of a second application is received at a first application. A service identifier is generated if a session with the second application is valid. A registry is generated at the first application. A catalog is generated based on the registry and the service identifier and the catalog are sent to the second application. A sub-request including the service identifier is received as part of an asynchronous client server transaction. Validity of the sub-request is determined by determining whether the service identifier has expired, whether the sub-request requests a service that is permissible according to the catalog, whether the service identifier is used in conjunction with the second application, or a combination thereof. If the sub-request is valid, the service is provided.

Abstract: A method for securing asynchronous client server transactions is provided in the illustrative embodiments. A request including an application identifier and a version of a second application is received at a first application. A service identifier is generated if a session with the second application is valid. A registry is generated at the first application. A catalog is generated based on the registry and the service identifier and the catalog are sent to the second application. A sub-request including the service identifier is received as part of an asynchronous client server transaction. Validity of the sub-request is determined by determining whether the service identifier has expired, whether the sub-request requests a service that is permissible according to the catalog, whether the service identifier is used in conjunction with the second application, or a combination thereof. If the sub-request is valid, the service is provided.

Abstract: A method for securing asynchronous client server transactions is provided in the illustrative embodiments. A request including an application identifier and a version of a second application is received at a first application. A service identifier is generated if a session with the second application is valid. A registry is generated at the first application. A catalog is generated based on the registry and the service identifier and the catalog are sent to the second application. A sub-request including the service identifier is received as part of an asynchronous client server transaction. Validity of the sub-request is determined by determining whether the service identifier has expired, whether the sub-request requests a service that is permissible according to the catalog, whether the service identifier is used in conjunction with the second application, or a combination thereof. If the sub-request is valid, the service is provided.

Abstract: A method, system, and computer usable program product for securing asynchronous client server transactions are provided in the illustrative embodiments. A request including an application identifier and a version of a second application is received at a first application. A service identifier is generated if a session with the second application is valid. A registry is generated at the first application. A catalog is generated based on the registry and the service identifier and the catalog are sent to the second application. A sub-request including the service identifier is received as part of an asynchronous client server transaction. Validity of the sub-request is determined by determining whether the service identifier has expired, whether the sub-request requests a service that is permissible according to the catalog, whether the service identifier is used in conjunction with the second application, or a combination thereof. If the sub-request is valid, the service is provided.

Abstract: A method, apparatus and computer-usable medium for a policy guidance system comprising one or more Cartesian coordinate plots of a policy's adherence and compliance guidelines. One or more segmented questionnaires are created, comprising a range of weighted responses, that are electronically distributed to one or more predetermined reviewers such as, but not limited to, policy makers or enforcers. Responses to the questionnaire are aggregated, statistically analyzed and scored to derive quantitative values that are then graphically plotted as one or more coordinates in a Cartesian format. The resulting graphical depiction of the policy's guidance parameters is then presented such that it facilitates a policy viewer's comprehension of the possible implications of noncompliance.

Abstract: A method, apparatus and computer-usable medium for a virtual policy control router, comprising applicable control elements relating to one or more external or internal policies. Two or more policy control repositories are aggregated to create a virtual policy control router, accessible and navigable by users to provide relevant and applicable control elements for establishing policy compliance initiatives. One or more agents are implemented as a web service comprising a services oriented architecture (SOA) to access policy control elements in their native repositories. The web service agent communicates policy control information to the virtual policy control router, contingent upon each control repository's existing security model and access controls. As policy control information is received from each web service agent, it is relationally associated with predetermined users and/or initiatives by the virtual policy control router.

Abstract: Embodiments of the present invention address deficiencies of the art in respect to decision point management for a business process and provide a method, system and computer program product for instant messaging forms based business process decision point facilitation. In one embodiment of the invention, a method for instant messaged forms based business process decision point facilitation can be provided. The method can include detecting a decision point in a business process, identifying a target collaborator for the detected decision point, applying instant messaging presence awareness for the target collaborator, and forwarding a form within an instant message to the target collaborator only when the target collaborator is determined to be present for instant messaging.

Abstract: A method, system and computer-usable medium for a policy validator that automates the validation of existing or proposed policies. A segmented questionnaire wizard is implemented to guide a policy creator through a series of policy-related questions, resulting in the automated generation of a questionnaire used for validating the policy. The resulting validation questionnaire is automatically distributed to predetermined subject matter experts and individuals affected by the policy, whose responses are then analyzed and scored by the policy validator to determine the validity of the policy. If the resulting validation score is within a predetermined, acceptable range, the policy is approved and released for implementation. Otherwise, the process is repeated until an acceptable validation score is achieved.

Abstract: A method, apparatus and computer-usable medium for a virtual policy control router, comprising applicable control elements relating to one or more external or internal policies. Two or more policy control repositories are aggregated to create a virtual policy control router, accessible and navigable by users to provide relevant and applicable control elements for establishing policy compliance initiatives. One or more agents are implemented as a web service comprising a services oriented architecture (SOA) to access policy control elements in their native repositories. The web service agent communicates policy control information to the virtual policy control router, contingent upon each control repository's existing security model and access controls. As policy control information is received from each web service agent, it is relationally associated with predetermined users and/or initiatives by the virtual policy control router.

Abstract: A method, apparatus and computer-usable medium for a policy guidance system comprising one or more Cartesian coordinate plots of a policy's adherence and compliance guidelines. One or more segmented questionnaires are created, comprising a range of weighted responses, that are electronically distributed to one or more predetermined reviewers such as, but not limited to, policy makers or enforcers. Responses to the questionnaire are aggregated, statistically analyzed and scored to derive quantitative values that are then graphically plotted as one or more coordinates in a Cartesian format. The resulting graphical depiction of the policy's guidance parameters is then presented such that it facilitates a policy viewer's comprehension of the possible implications of noncompliance.

Abstract: Dynamic profile access control. Access control is provided by dynamically forming user groups according to a hierarchical organization structure and policy rules specified for organizational resources. The dynamically formed user groups are treated as the subject in a common access control component and are used to grant permission to or revoke permission to individual or groups of elements.

Abstract: A method, system, and computer program product for processing objectives of an organization. Included is a computerized system having: a graphical interface for displaying an objective hierarchy, wherein the objective hierarchy comprises a plurality of objectives; and a visual execution status system for displaying a visual execution status for each of the plurality of objectives, wherein the visual execution status connotes information regarding how well the objective is being performed.