METHOD AND SYSTEM FOR TECHNOLOGY RISK AND CONTROL

摘要

A computer-implemented method and system provides a collaborative framework toassess and manage an enterprise's technology risk and controls for mitigatingsuch risk.The framework is configured to collect risk assessments associated withtechnologyassets from various lines of business within an enterprise, map such risks toappropriatecontrols and identify and manage control gaps were controls are not in place.Thesystem may comprise a database and a framework application providing access tothedatabase. The framework application is enabled with workflow, such as viarules, toassign tasks to collaborative users and track task completion. Various riskdata, controldata and workflow-related task data may be stored to the database. Variousdata viewsand reports may be generated for identifying tasks for completion, assessingperformance and compliance. The rules may be configurable to alter theworkflow.