Abstract: A method of computing spreadsheet risk within a spreadsheet risk reconnaissance network employing a research agent installed on one or more spreadsheet file servers registered on the network, and one or more spreadsheet file servers for supporting one or more user organizations registered and communicating with a data processing center. The method involves the steps of one or more of the research agents collecting metadata from spreadsheet files stored on said spreadsheet file servers registered on the network. Either the research agents or the data processing center, (i) analyze the collected metadata associated with each spreadsheet file, (ii) identify Spreadsheet Purpose from collected metadata, and (iii) calculate the Relative Likelihood of Error (RLE) and the Relative Likelihood of Concern (RLC), based on the calculated RLE, for a plurality of spreadsheet files associated with at least one user organization under management by the network.

Abstract: A method of implementing an organization's policy on spreadsheet files monitored using a spreadsheet risk reconnaissance network. The method involves creating and pre-configuring a number of policy components in a relational database server on the network. A spreadsheet inspector logs-on to the network, and selects an inspection from the list of inspections to be performed. In response to the selection, the network automatically builds an inspection worksheet for each policy component which is to be manually inspected by the inspector. the inspection worksheet includes all policy compliance components which require human judgment to assess the degree to which an item passes compliance, as well as general notes to allow for inspection items which are not related to the specific compliance items.

Abstract: A spreadsheet risk reconnaissance network including one or more spreadsheet file servers registered with the network, supporting at least one user organization, and communicating with a data processing center. A research agent is installed on at least one spreadsheet file server registered on the network. Each research agent operates transparently to users on the network so as to perform a number of functions, including (i) collecting metadata from spreadsheet files, (i) analyzing collected metadata associated with each spreadsheet file, (iii) identifying Spreadsheet Purpose from collected metadata, and (iv) calculating the Relative Likelihood Of Error (RLE) and the Relative Likelihood Of Concern (RLC), based on the calculated RLE, for a plurality of spreadsheet files associated with at least one user organization, under management by the network. Calculation of RLE and RLC can be performed at the data processing center or the research agent.

Abstract: A method of inspecting spreadsheet files managed within a spreadsheet risk reconnaissance network. The method involves a spreadsheet inspector logging-on to the network, and selecting a spreadsheet inspection from the list of spreadsheet inspections to be performed. In response to the selection, the network automatically generates an inspection worksheet for each policy component which is to be manually inspected by the inspector. The inspection worksheet includes all policy compliance components which require human judgment to assess the degree to which an item passes compliance, as well as general notes to allow for inspection items which are not related to the specific compliance items. Upon receiving the network-generated inspection worksheet, the spreadsheet inspector opening the spreadsheet file to be inspected, via a provided hyperlink, and applying human judgment in assessing whether or not the spreadsheet file successfully passes each set of criteria established in the spreadsheet policy.

Abstract: A method of classifying spreadsheet files managed within a spreadsheet risk reconnaissance network, comprising the steps of assigning a spreadsheet manager to a group of spreadsheet directories in an user organization. The spreadsheet manager logs-on to the network, and determines whether or not there are spreadsheet files to classify. If there are no spreadsheet files to classify, then the spreadsheet manager ends the process. If there are spreadsheet files to classify, then the spreadsheet manager assigns values for criticality, confidentiality and impact to the spreadsheet files. The spreadsheet manager assigns a spreadsheet inspector to each classified spreadsheet file, and the network generates email to notify the spreadsheet inspector of a spreadsheet inspection request.

Abstract: A spreadsheet risk reconnaissance network including a research agent installed on one or more spreadsheet file servers registered on the network, and a plurality of spreadsheet file servers for supporting a plurality of user organizations registered and communicating with a data processing center. Each research agent operates transparently to users on the network so as to perform a number of functions, including (i) collecting metadata from spreadsheet files stored on said spreadsheet file servers registered on said network, and (ii) transmitting the collected metadata to the data processing center for storage and analysis.