Abstract: A method of providing True Continuous Control Monitoring (CCM) of business processes for audit purposes is provided herein. The method includes the following steps: consolidating data from multiple sources, in case the transactional data is located in more than one source, to a single self contained and comprehensive source; identifying, in the single data source, data elements that are required for detection and reporting for each audit rule; translating and streaming, in case required, the transactions data into events, so that every change in a transaction is immediately reflected and identifiable; eliminating duplicate events for the same single transaction; applying the event processing engine to the events, based on event audit patterns derived from audit rules, possibly entered by non-programmers; and generating alert data in audit-style notation, to be reported back to the system, based on alert notifications derived from the event processing engine.

Abstract: A method of providing True Continuous Control Monitoring (CCM) of business processes for audit purposes is provided herein. The method includes the following steps: consolidating data from multiple sources, in case the transactional data is located in more than one source, to a single self contained and comprehensive source; identifying, in the single data source, data elements that are required for detection and reporting for each audit rule; translating and streaming, in case required, the transactions data into events, so that every change in a transaction is immediately reflected and identifiable; eliminating duplicate events for the same single transaction; applying the event processing engine to the events, based on event audit patterns derived from audit rules, possibly entered by non-programmers; and generating alert data in audit-style notation, to be reported back to the system, based on alert notifications derived from the event processing engine.

Abstract: A method for information processing includes defining a set of abstract operators for use in implementing computing operations, including iterative operations. Respective execution times are determined for the operations implemented by the abstract operators. Given a definition of a rule, including a complex event and an action to be performed upon occurrence of the complex event, software code to implement the rule is automatically generated by generating concrete instances of the abstract operators so as to invoke a sequence of computing steps that includes iterations of the iterative operations. A worst-case estimate of a duration of execution of the software code is computed based on the respective execution times.

Abstract: A method, device and computer program product that monitor situations. The method includes: processing information indicative of an occurrence of events to detect, in response to a current rule set, an occurrence of at least one situation that belongs to a situation set; wherein at least one rule sub-set out of the rule set defines at least one relationship between events that should occur within a lifespan; receiving a request to update a first rule; updating the first rule to provide a first updated rule while continuing to detect an occurrence of situations not affected by the update of the first rule.

Abstract: A method for information processing includes determining respective execution times for a plurality of operations on a selected computing platform. When a definition of a rule is received, including a complex event and an action to be performed upon occurrence of the complex event, software code is automatically generated to implement the rule on the selected computing platform by invoking a sequence of the operations responsively to the occurrence of the complex event. A worst-case estimate of a duration of execution of the software code is computed, based on the respective execution times of the operations in the sequence. When the worst-case estimate is no greater than a predetermined limit, the software code is run on the selected computing platform so as to cause the action to be performed when the rule is satisfied.

Abstract: A method, device and computer program product that monitor situations. The method includes: processing information indicative of an occurrence of events to detect, in response to a current rule set, an occurrence of at least one situation that belongs to a situation set; wherein at least one rule sub-set out of the rule set defines at least one relationship between events that should occur within a lifespan; receiving a request to update a first rule; updating the first rule to provide a first updated rule while continuing to detect an occurrence of situations not affected by the update of the first rule.