Abstract: A method analyzes risks in a technical project for developing or manufacturing a technical system or technical components or a technical process, wherein the following steps are carried out in a risk identification process: a) provision or determination of a large number of qualitative evaluations of risks in the technical project; b) determination of a large number of quantitative evaluations of the risks; c) comparison of the qualitative and quantitative evaluations for each risk, as a result of which a comparison outcome is established for each risk; d) definition of a permissible region of comparison outcomes; e) classification of the risks that are situated outside the permissible region as unacceptable risks; f) analysis of the unacceptable risks in order to identify uncertainties in the risk analysis and further risks.

Abstract: The present invention provides a method and system for managing various Regulations, Policies and Risks (RPR). These RPR are managed for supporting Governance, Risk and Compliance requirements of an organization. The method includes defining a tree structure for a context. The tree structure is defined for one or more RPR and one or more roles of a plurality of users of the organization. The RPR are intervened across various trees. A plurality of nodes is defined for the tree. Each node includes a plurality of attributes and one or more attribute functions.

Abstract: A method for information technology (IT) and information asset risk assessment of a business relationship between a client and a third party. The method includes establishing a database. The database includes a plurality of IT information risk factors. The database is configured to receive IT risk information. The IT risk information is associated with the plurality of IT information risk factors. The plurality of IT information risk factors includes a subset of relationship risk factors. The subset of relationship risk factors are utilized for evaluating the business relationship risk between the client and the third party. The method also includes receiving IT risk information corresponding to the subset of relationship risk factors. The method continues with generating a relationship risk score. The relationship risk score is determined in response to evaluating the subset of relationship risk factors using the IT risk information corresponding to the subset of relationship risk factors.

Abstract: A method for predicting and quantifying risk in information technology (IT) service contracts includes comparing features of a new IT service contract with similar features from one or more previous IT service contracts selected from a plurality of previous IT service contracts to calculate a similarity value between each pair of the new IT service contract and one of the one or more previous IT service contracts, aggregating the similarity values, and using the aggregated similarity values with a prediction model to predict risk factors affecting the new IT service contract and to quantify an impact of each predicted risk factor on an expected gross profit margin.

Abstract: A method for predicting and quantifying risk in information technology (IT) service contracts includes comparing features of a new IT service contract with similar features from one or more previous IT service contracts selected from a plurality of previous IT service contracts to calculate a similarity value between each pair of the new IT service contract and one of the one or more previous IT service contracts, aggregating the similarity values, and using the aggregated similarity values with a prediction model to predict risk factors affecting the new IT service contract and to quantify an impact of each predicted risk factor on an expected gross profit margin.

Abstract: An information processing apparatus includes a difference calculation module, an addition module, and an output module. The difference calculation module calculates a difference between a first information amount that is generated between a first person in charge and a second person in charge when a business that constitutes a business process is finished and a second information amount that is estimated to be generated between the first person in charge and the second person in charge when the business that constitutes the business process is finished. The addition module adds the differences calculated by the difference calculation module in a combination of the first person in the business process and the second person in the business process or in other business process related to the business process. The output module outputs the sum of the differences calculated by the addition module as risks of the business processes.

Abstract: In one embodiment, a method includes centrally maintaining a parameter bank comprising a plurality of parameters and a question bank comprising a plurality of questions. The method further includes creating an application-migration assessment. The creating includes receiving a selection of parameters from the parameter bank. The creating also includes providing a list of questions attached to at least one parameter in the selection of parameters. The creating further includes receiving a selection of questions from the list of questions. In addition, the method includes facilitating a taking of the application-migration assessment. Furthermore, the method includes scoring the one or more outcome options based on assessment answers from the taking. Additionally, the method includes generating a recommendation for each of the one or more outcome options based on the scoring.

Abstract: The reward or return a company receives in a particular country relative to the risk the company takes in that country is assessed. The relative risk of the particular country compared to selected groups of countries, for example groups including countries having emerging or developing economies and groups including countries having developed economies. The relative profitability of the particular country in relation to the profitability of such groups of countries is further considered in the assessment. Other return components are also considered to allow risk adjusted decisions.

Abstract: A method for assessing interaction risks via a computer server potentially associated with transactions between a client and a provider is disclosed. The method comprises receiving client claims data on a server from at least a first data source, which is stored in a database operably associated with the server. Risk guidelines are also stored in the database. The server receives client identifying information from the provider and selects client claims data from the database based that identifying information and categorizes the client into a risk category based on a computer analysis of the provider's risk guidelines and the selected client claims data. The method involves delivering functionality to the provider that automatically captures communications involving the client and the provider and automatically reports on the captured communications via at least one communication platform, wherein the frequency of capturing, reporting, or both is based on the client risk category associated with the client.

Abstract: A quantitative based risk assessment process is disclosed. The process includes the identification of parameters and sub-parameters relating to socio/economic, environmental and project construction risks in providing a quality risk assessment of a region and/or project for renewable and non-renewable energy projects. Risks parameters are variable and can be selected from a number of predetermined categories as needed for each project and can be weighted differently based on the needs and/or goals of the project and the impact thereof. Systems, storage devices and mediums and outputs of same are also provided.

Abstract: A method is implemented in a computer infrastructure having computer executable code tangibly embodied on a computer readable storage medium having programming instructions. The programming instructions are operable to receive one or more risk factors, receive one or more contexts, identify one or more context relationships and associate the one or more contexts with the one or more risk factors. Additionally, the programming instructions are operable to map the one or more risk factors for an associated context to a software defect related risk consequence to determine a risk model and execute a risk-based testing based on the risk model to determine a defect related risk evaluation for a software development project.

Abstract: A capital asset planning system for selecting assets for improvement within an infrastructure that includes one or more data sources descriptive of the infrastructure, one or more databases, coupled to the one or more data sources, to compile the one or more data sources, one or more processors, each coupled to and having respective communication interfaces to receive data from the one or more databases. The processor includes a predictor to generate a first metric of estimated infrastructure effectiveness based, at least in part, on a current status of the infrastructure, a second metric of estimated infrastructure effectiveness based, at least in part, on a user-selected, proposed changed configuration of the infrastructure, and a net metric of infrastructure effectiveness based, at least in part, on said first metric and said second metric.

Abstract: A system and method for monitoring business processes implementation in organizations, and more specifically, system and method for reducing roll-out risks.

Abstract: A system and method for analyzing commuting metrics. One exemplary embodiment includes a method that includes receiving, via a computer interface, location data for a set of locations associated with an entity, the location data including physical location data, the computer interface selected from at least one of a user interface or network communications interface; receiving commuter data for a set of commuters, the commuter data for each commuter from the set of commuters including commute start location data; determining a set of values of a commuting metric, each value from the set of values of the commuting metric being based on one of the physical location data and one of the commute start location data; and generating an electronic file including at least one of the set of values of the commuting metric.

Abstract: Analyzing external operational risk comprises receiving data associated with an organization from a data source over a network. Data associated with a plurality of third parties is received from a plurality of data sources over the network. A processor categorizes the organization data and the third party data according to operational risk categories and analyzes the categorized organization data and the third party data. A report is created based on the analysis and communicated to a computer.

Abstract: An apparatus, method and non-transitory computer-readable storage medium for processing market data. The apparatus may comprise a risk analyzer arranged to access a first set of time-series market data from a data source and to process said first set of time-series market data to generate data indicative of a risk category. The apparatus may also have a trend analyzer arranged to access said data indicative of a risk category determined by the risk analyzer and to output a value of a market indicator based on a second set of time-series market data. The trend analyzer may be arranged to determine the value of the market indicator using an output of a set of filters and the set of filters may be selected by the trend analyzer according to said data indicative of a risk category.

Abstract: The method proposed is an approach for creating, valuing and securitizing derivative instruments which are linked to a casino's or a basket of casinos' aggregate win rate. The invention has several components, all of which are facilitated by software: (1) a method for developing a risk profile for a given casino or a portfolio of casinos; (2) a method for estimating the optimal hedging strategy for a given casino based on level risk profile, maximum wagers at the table and required liquidity/corporate finance structure; (3) a method for estimating the expected value of variances in actual win rate to the threshold win rate; and (4) a method for developing the features required for securitizing an individual casino's or a portfolio of casino's derivative contracts.

Abstract: Methods, systems, and computer-readable media are disclosed for selecting a set of security offerings. A particular method includes receiving a security need profile associated with a computing environment and receiving security offering information related to a plurality of security offerings. The security offerings of the plurality of security offerings are evaluated with respect to the security need profile. A set of security offerings from the plurality of security offerings are automatically selected.

Abstract: A system and method of managing supply chains across separate organizations. The organizations that supply items to an organization and the organizations that use items supplied by that organization are defined in a consumer/producer hierarchy of three or more layers. Organizations at the first layer supply items to one or more organizations at the second layer while organizations at the second layer supply items to one or more organizations at the third layer, wherein each item may include a product or a service. A supply chain database is created and each organization is given access only to supply chain information within that organization's supply chain.

Abstract: A computer implemented method monetizes the security of a cyber-system in terms of losses each stakeholder may expect to lose if a security break down occurs. A non-transitory media stores instructions for generating a stake structure that includes costs that each stakeholder of a system would lose if the system failed to meet security requirements and generating a requirement structure that includes probabilities of failing requirements when computer components fails. The system generates a vulnerability model that includes probabilities of a component failing given threats materializing and generates a perpetrator model that includes probabilities of threats materializing. The system generates a dot product of the stakes structure, the requirement structure, the vulnerability model and the perpetrator model. The system can further be used to compare, contrast and evaluate alternative courses of actions best suited for the stakeholders and their requirements.

Abstract: Embodiments described herein include are directed to managing response plans of an enterprise. Business recovery plans, system recovery plans, and emergency management plans for the enterprise are identified, where the business recovery plans relating to business aspects of the enterprise, the system recovery plans relating to technology aspects of the enterprise, and the emergency management plans relating to emergencies affecting the enterprise. The business recovery plans, system recovery plans, and emergency management plans are evaluated and plan metrics for the business recovery plans, system recovery plans, and emergency management plans are calculated independently and separately from each other. The plan metrics are calculated in response to the evaluation of the business recovery plans, the system recovery plans, and the emergency management plans. A readiness of the business recovery plans, the system recovery plans, and the emergency management plans is determined based on the evaluation.

Abstract: Augmenting service oriented architecture (‘SOA’) governance maturity including receiving an evaluation of the maturity of the governance of the SOA; identifying, for each governance capability in dependence upon the evaluation of the maturity of the governance capability, one or more predefined risks to the SOA; establishing, for each governance capability in dependence upon the predefined risks to the SOA, a risk value representing the severity of the predefined risks; selecting, for each governance capability in dependence upon the evaluation of the maturity of the governance of the SOA and the predefined risk value, one or more governance work products; and communicating to predetermined stakeholders in the SOA the one or more predefined risks to the SOA identified for each governance capability, the risk value established for each governance capability, and the governance work products selected for each governance capability.

Abstract: A method, system, and/or computer program product predicts trouble during a transition phase of a current project. Past operational data and past trouble data for past healthy projects and past troubled projects before transition phases is collected. A trouble correlation between the past operational data and the past trouble data is then determined. A set of key metrics that describes a current health of a current project before transitioning from a current phase to a future phase is defined, and values of the set of key metrics for the current project are identified. Identified values of the set of key metrics for the current project are compared to the past operational data for past healthy and troubled projects in order to generate a pattern comparison. This pattern comparison, along with the trouble correlation, is used to generate a predicted quality of transition for the current project.

Abstract: A system and method for facilitating facilitating management of innovations and accompanying constituent concepts. An example method includes providing a first user option to define one or more alternate solution categories for one or more concepts, wherein each alternate solution category is associated with an innovation comprising a structure of concepts, and wherein an alternate solution category is associated with an alternate solution structure; providing a second user option to define a concept as an alternate solution concept belonging to an alternate solution category; and associating one or more metric attributes with an alternate solution concept. The user options may be provided via a user interface display screen with additional user interface controls for generating analysis pertaining to alternative concept structures in association with one or more metrics, such as supply chain risk, cost, compliance, fulfillment, and/or other product objectives or metrics.

Abstract: A system for determining lack of compliance of a transactional entity with an enterprise policy by maintaining an historical record of the entity as changes are made over time. The system allows establishment, codification, and maintenance of enterprise policies, monitors electronic transactions of the enterprise from various data sources, detects exceptions to established policies, reports exceptions to authorized users such as managers and auditors, and/or provides a case management system for tracking exceptions and their underlying transactions. A master data extractor establishes an initial instance of a transactional entity in a monitoring database. A changed data extractor is responsive to changed data for establishing a subsequent instance of the transactional entity in the monitoring database.

Abstract: Techniques for assessing a resiliency level in an information technology system and architecting the information technology system in accordance with the resiliency level are disclosed. An estimated resiliency level may be estimated from different system characteristics to obtain an estimated resiliency level for the information technology system. The cost and the degree of effort to design for the information technology system may be estimated from the estimated resiliency level. The resiliency level may be further determined from different system factors. Consequently, a specification for a resiliency feature is obtained by accessing a set of resiliency guidelines based on the resiliency level and a technology theme. The resiliency feature may then be applied to the information technology system.

Abstract: A method and system for quantifying risk by composing a heterogeneous risk model are provided. The method comprises providing risk input data associated with one or more risk nodes to a processor, running one or more risk models to output individual risk quantifications for each risk node, and aggregating the individual risk quantifications into a single output. The system comprises a processor operable to provide risk input data associated with one or more risk nodes to a processor, run one or more risk models to output individual risk quantifications for each risk node and aggregate the individual risk quantifications into a single output.

Abstract: A method of managing a data breach is implemented in a management platform, preferably as an Internet-accessible service. The method begins upon receipt of data defining a data loss event associated with an organization. The data is processed by a rules engine against a corpus of data sets. A data set is associated with a business requirement (e.g., a State regulation) and encodes a decision tree defining predefined responses prescribed by the business requirement upon occurrence of a data breach. As a result of the processing, a privacy impact assessment defining an impact of the data loss event may be generated. The data loss event may then be escalated into an incident. The incident has associated therewith a response plan that is generated as a function of at least one characteristic of the data loss event and at least one response in the set of predefined responses.

Abstract: The invention measures and captures customer experience perception parameters against a host of touch-points and from various perspectives, through a coordinated and participative process. Further it provides detailed insight into various telecom process and application impacting the customer experience by using standard approach of eTOM process & TAM application for better understand ability. The system also enabled to perform RAG analysis for the purpose of report generation that helps the management identify good/bad customer experience areas within the total lifecycle of the interaction with the customer.

Abstract: In an example embodiment, supplier management is performed first by defining one or more social media metrics pertaining to a supplier brand of interest, with the one or more social media metrics being based on data gathered from social media. These metrics may then be used to analyze values from one or more social media websites. Weights can be assigned to the values, and a score for the supplier brand of interest can be determined, based on the weighted values for the one or more social metrics and based on weighted values for one or more other metrics. The score can then be presented to a user via a graphical user interface.

Abstract: A risk framework is described for computing risk. One or more persons may be grouped into classes of stakeholders. Different types of risk may be classified into risk categories. Within each risk category, events contributing to that type of risk may be determined and assigned a weight/severity value and a likelihood of occurrence value. Risk likelihood may be computed for each risk category by summing the products of weight/severity value and likelihood of occurrence value for each event within the risk category. A severity level may be determined and assigned with respect to each class of stakeholders regarding the risk categories, and a risk score may be computed for each stakeholder class and risk category combination. An aggregate risk likelihood may be computed by summing and/or weighting the risk likelihoods computed for each risk category.

Abstract: Systems and methods for detecting instances of click fraud are disclosed. Click fraud occurs when, for example, a user, malware, bot, or the like, clicks on a pay per click advertisement (e.g., hyperlink), a paid search listing, or the like without a good faith interest in the underlying subject of the hyperlink. Such fraudulent clicks can be expensive for an advertising sponsor. Statistical information, such as ratios of unpaid clicks to pay per clicks, are extracted from an event database. The statistical information of global data is used as a reference data set to compare to similar statistical information for a local data set under analysis. In one embodiment, when the statistical data sets match relatively well, no click fraud is determined to have occurred, and when the statistical data sets do not match relatively well, click fraud is determined to have occurred.

Abstract: A systems and methods are described detect fraud in existing logs of raw data. There can be several disparate logs, each including data of disparate data types and generated by different and possibly unrelated software enterprise applications. The fraud management system aggregates and organizes the raw log data, extends the raw data with reference data, archives the data in a manner that facilitates efficient access and processing of the data, allows for investigation of potentially fraudulent usage scenarios, and uses the results of the investigation to identify patterns of data that correspond to correspond to high risk usage scenarios and/or process steps. In subsequent processing, archived data can be compared against the identified patterns corresponding to high risk usage scenarios to detect matches, and the invention thereby automatically detects high risk usage scenarios and issues appropriate alerts and reports.

Abstract: A method and system for capturing research decision flow in a Research and Development (R&D) activity are provided. The method includes defining an objective of the R&D activity and determining one or more requirements for fulfilling the objective of the R&D activity. Furthermore, the method also includes defining a set of tests to verify that the requirements are satisfied or the risks have been mitigated. Furthermore, the method also includes developing a task plan to satisfy the one or more requirements and mitigate one or more risks of the set of risks. Furthermore, the method also includes linking the objective, the one or more requirements, the set of risks and the task plan, to generate a linked information record. In an additional embodiment, the method includes identifying a set of risks associated with failure to satisfy the one or more requirements.

Abstract: Techniques for storing information include making determinations whether to store data from a data source based at least in part on one or more reputation metrics calculated for an individual associated with the information. The scope of information collected about an individual is varied based on the individual's reputation and/or the reliability of the source of information, which may be a social network system or other data source.

Abstract: An integrated safety-evaluation with labor-time-standard system is provided that includes a work-task manager, integrated module and ergonomic safety evaluator. The work-task manager may be configured to receive a work instruction and determine work elements applicable to the work instruction, with the work elements may have respective associated elemental unit times, elemental risk ratings and frequency values. The integrated module may be configured to receive the elemental unit times, elemental risk ratings and frequency values for the work elements, and calculate a labor time standard and ergonomic safety rating therefrom. And the ergonomic safety evaluator may be configured to receive the labor time standard and ergonomic safety rating and perform an ergonomic safety evaluation therefrom. In this regard, the ergonomic safety evaluator may be configured to perform the ergonomic safety evaluation to determine whether to release or reject the work instruction.

Abstract: Some embodiments include a system, method, apparatus and means for managing information associated with risk. In some embodiments, information associated with risk is collected, analyzed, stored, and disseminated. According to some embodiments, the information associated with risk is utilized to identify risk.

Abstract: Systems and techniques for developing and implementing a credit risk model using various sources of data, including price data, financial accounting ratios, ESG (Environmental, Social and Governance) data, and textual data are disclosed. Each source of data provides unique and distinct information about the health of an entity, such as a firm or company. The systems and techniques combine information from disparate sources to create a uniquely powerful signal. The systems and techniques can be used to predict a number of events including, but not limited to, probability of default or bankruptcy, loss given default, probability of rating agency rating change, and probability of equity price moves.

Abstract: A method, system and non-transitory computer-readable medium for predicting customer attrition are provided. The method can include executing code to load historical data relating to a customer into a database to create a customer history summary file. The method can include executing code to load daily data relating to the customer into a scoring engine. The method can include programmatically processing, via the scoring engine, at least one of the historical data and the daily data to generate an attrition score. The attrition score can indicate a predictive signal of attrition of the customer.

Abstract: The invention generally relates to a tool for planning a communication campaign. The invention provides systems and methods for communicating through mobile devices in which a publisher can model the effectiveness of a customer's communication campaign as a function of media purchase quantity to aid the customer in selecting a purchase quantity that optimizes a ratio of return on investment to risk. The publisher can do this by providing the customer with access to a computer server system that includes a campaign management tool with an ROI simulator. In certain aspects, the invention provides a method of planning communication on mobile devices by receiving a set of communication campaign parameters, simulating effectiveness as a function of units purchased for the received parameters, and for providing the simulated effectiveness for a plurality of values for the units purchased.

Abstract: Methods, computer-readable media, and apparatuses are disclosed for risk scenario analysis. Aspects of the embodiments disclose methods, computer readable media, and apparatuses for identifying scenarios for operational risk scenario analysis using analytical and quantitative methods. Additional aspects of the embodiments disclose methods, computer readable media, and apparatuses for identifying business units for performing risk scenario analysis using analytical and quantitative methods.

Abstract: A mechanism is provided for reducing duplicate information. Diagnostic data associated with a new incident that has occurred is received and at least one new incident dump file is created for the new incident that includes some or all of the diagnostic data. The diagnostic data in the at least one new incident dump file is compared to diagnostic data in at least one corresponding preceding incident dump file. Responsive to the at least one new incident dump file comprising diagnostic data that is different from the at least one corresponding preceding incident dump file, at least one comparison dump file is generated that comprises only the differences in the at least one new incident dump file that are not contained in the at least one corresponding preceding incident dump file. A report package that includes the at least one comparison dump file is then transmitted to a support system.

Abstract: Methods and systems are provided herein for monitoring pathogens in various environments and on various items, wherein data from monitoring is trackable, analyzable and comparable versus various standards or thresholds. The methods and systems disclosed herein also include a platform for managing the detection and reporting of pathogens across a number of locations within a number of environments, and using such detection for a wide variety of purposes.

Abstract: Methods, apparatus, and computer-readable media are described for generating a credible market value that is utilized to produce a listing price for a property with reduced risk of a substantial reduction in the listing price before selling the property and for assessing risk of incorrectly pricing a property. A subject property, selected comparables, and selected comparables having multiple sales are imported from one or more databases for analysis. Information that is imported may include, for example, property features, original listing prices, record of days on the market, and a final listing price and sales price for each property that was sold. A market analysis process is run to produce relative market assessments and a residential value process is run including appreciation calculations based on the comparable properties having multiple sales to produce the credible market value.

Abstract: A system and method for determining an optimal action in consideration of risk. The method includes the steps of: (a) selecting a state from possible states in a current term; (b) selecting an action from action candidates that can be executed in a selected state; (c) calculating a probability distribution of an evaluation value for a selected action; (d) calculating a risk measure using the probability distribution of the evaluation value; (e) determining a weighting function conforming to at least one preference by taking the risk measure into consideration; (f) calculating a value measure of the selected action; (g) repeating steps (b) through (f) for all other the action candidates that can be executed in the selected state; and (h) comparing the value measures of the selected actions in order to determine an optimal action for the selected state.

Abstract: Methods, computer-readable media, and apparatuses are disclosed for identifying predictive key risk indicators (KRIs) for organizations and/or firms through the application of specific statistical and quantitative methods that are well integrated with qualitative adjustment. An indicator is a variable with the purpose of measuring change in a phenomena or process. A risk indicator is an indicator that estimates the potential for some form of resource degradation using mathematical formulas or models. Organization/enterprise key risk indicators are an essential arsenal in the risk management framework of any firm or organization and may be required by regulatory agencies.

Abstract: The disclosed system relates to identification of risk before and during the creation of hardware and software products and services. A method for assessing risk in product development includes the steps of creating a software program and storing the software program in a non-transitory medium, receiving user input respecting the product development program, identifying risks to continuing development of the product, and assigning a technology readiness level to the new technology being incorporated into the product. User input includes query functions and data display capabilities.

Abstract: Methods, computer-readable media, and apparatuses are disclosed for quantifying risk and control assessments. The risk includes both residual risk and direction of risk. Various aspects of the invention quantitatively compare the risk and control assessments against step-ahead losses using special regression models that are particularly applicable to this kind of data. The empirical comparison may be performed on both loss event frequency and severity in two different and separate dimensions. The empirical comparison may also be performed using losses extracted by even occurrence and event settlement dates in two separate dates.

Abstract: Example issue processing systems and methods are described. In one implementation, a method identifies an issue and accesses rules related to resolving the issue. The method also accesses data associated with previous issue resolutions. The identified issue is analyzed based on the rules and data associated with previous issue resolutions. Based on the analysis, the method determines a first activity to perform and identifies the results of performing the first activity. If the first activity did not resolve the issue, the method further analyzes the issue based on the rules, the data associated with previous issue resolutions, and the results of performing the first activity. Based on this further analysis, the method determines a second activity to perform in an attempt to resolve the issue.

Abstract: A system and method are provided for finding and retrieving information within an enterprise that is relevant to enterprise problems, enterprise opportunities, and unexpected or interesting events. The method includes scanning content related to a process conducted by an enterprise, where the process includes one or more process steps; identifying a problem, opportunity or event associated with a process step (an enterprise stress point); indexing the scanned content with respect to the enterprise stress point; determining whether the scanned content is information relevant to the problem, opportunity or event; and providing relevant information to a user. The relevant information includes a description or discussion of a contemporaneous or previous experience of the enterprise regarding the problem, opportunity or event.