Abstract: A system, method and computer program product for assessing risk of a process through a set of entities identified as utilizing personal data needing protection from misuse and wrongful disclosure comprising mapping the identified process including identifying a purpose of the identified process and a sensitivity of that purpose; identifying data elements including the utilized personal data and including a volume and sensitivity of those identified data elements; identifying data types including the utilized personal data and including a volume and sensitivity of those identified data types; identifying data subjects about whom data is involved in the process including a volume and sensitivity of those identified data subjects; and identifying the set of entities involved in the process and their locations; and identifying data flows among the set of entities involved in the process; and applying a set of rules against the mapped process to provide a risk assessment of the mapped process based on the risk se

Abstract: A method, system and/or computer usable program product for performing a risk assessment, to a coded standard, of data-related risks within a data process including modeling the data process including identifying a purpose of the data process, identifying nodes representing data objects interconnected with edges representing data flows; and applying a set of rules associated with the coded standard against the modeled data process to provide a risk assessment to the coded standard of a degree of data-related risks generated by the data process.