Automated tagging of applications based on regulatory domain
Automated tagging of applications based on regulatory domain includes obtaining request data associated with a service request. The service request is associated with an application. Based on the request data, classification data associated with the service request is generated. The classification data is indicative of an operation associated with the application, or a service domain associated with the application. Based on the classification data, a regulatory tag is determined for the application. The regulatory tag is determined from a set of defined regulatory tags. A set of controls associated with the service request is determined based on the regulatory tag. The request data is validated against the set of controls and the service request is executed based on the validation of the request data.
1 . A computer-implemented method, comprising:
obtaining, by a computer, request data associated with a service request, wherein the service request is associated with an application;
generating, by the computer, a first textual script associated with the service request based on the request data;
inputting, by the computer, the first textual script associated with the service request to an artificial intelligence (AI) model to receive a first output;
generating, by the computer, classification data associated with the service request based on the first output, the classification data indicative of at least one of an operation associated with the application or a service domain associated with the application;
determining, by the computer, a regulatory tag for the application based on the classification data, wherein the regulatory tag is determined from a set of defined regulatory tags;
determining, by the computer, a set of controls associated with the service request based on the regulatory tag;
validating, by the computer, the request data of the service request against the set of controls associated with the service request; and
executing, by the computer, the service request based on the validation of the service request.
2 . The computer-implemented method of claim 1 , further comprising generating, by the computer, a notification associated with the service request based on the validation.
3 . The computer-implemented method of claim 1 , further comprising:
generating, by the computer, updated request data associated with the service request upon detection of an invalid service request, wherein
the updated request data is generated based on the request data and the set of controls, and
the updated request data is compliant with the set of controls.
4 . The computer-implemented method of claim 1 , further comprising:
receiving, by the computer, service data associated with each service request of a plurality of service requests, wherein the service data associated with each service request of the plurality of service requests comprises at least one of input format data or endpoint data;
identifying, by the computer, a set of service requests from the plurality of service requests based on the service data of each service request of the plurality of service requests, wherein
the set of service requests is associated with the application, and
the set of service requests comprises the service request;
generating, by the computer, characteristics data for the application based on the service data, wherein the service data is associated with each service request of the set of service requests; and
determining, by the computer, the regulatory tag for the application based on the characteristics data.
5 . The computer-implemented method of claim 4 , further comprising:
determining, by the computer, interface data associated with one or more interface components of the application based on the set of service requests, wherein the set of service requests is associated with the application; and
determining, by the computer, a set of regulatory controls associated with each interface component of the one or more interface components based on the characteristics data and the regulatory tag.
6 . The computer-implemented method of claim 1 , further comprising:
generating, by the computer, a second textual script associated with the service request based on the regulatory tag for the application;
inputting, by the computer, the second textual script associated with the service request to the AI model to receive a second output; and
determining, by the computer, the set of controls associated with the service request based on the second output.
7 . The computer-implemented method of claim 6 , further comprising:
retrieving, by the computer, a plurality of controls associated with a plurality of regulatory domains; and
determining, by the computer, using the AI model, the set of controls associated with the service request from the plurality of controls, wherein the set of controls is associated with the application.
8 . The computer-implemented method of claim 1 , wherein the AI model is a large language model (LLM).
9 . The computer-implemented method of claim 1 , wherein the request data comprises at least one of user input data or service request resource locator data.
10 . A computer system, comprising:
a processor set;
one or more computer-readable storage media; and
program instructions stored on the one or more computer-readable storage media, the program instructions executable by the processor set to cause the processor set to:
obtain request data associated with a service request, wherein the service request is associated with an application;
generate a first textual script associated with the service request based on the request data;
input the first textual script associated with the service request to an artificial intelligence (AI) model to receive a first output;
generate classification data associated with the service request based on the first output, the classification data indicative of at least one of an operation associated with the application or a service domain associated with the application;
determine a regulatory tag for the application based on the classification data, wherein the regulatory tag is determined from a set of defined regulatory tags;
determine a set of controls associated with the service request based on the regulatory tag;
validate the request data of the service request against the set of controls associated with the service request; and
execute the service request based on the validation of the service request.
11 . The computer system of claim 10 , wherein the program instructions further cause the processor set to:
receive service data associated with each service request of a plurality of service requests, wherein the service data associated with each service request of the plurality of service requests comprises at least one of input format data or endpoint data;
identify a set of service requests from the plurality of service requests based on the service data of each service request of the plurality of service requests, wherein
the set of service requests is associated with the application, and
the set of service requests comprises the service request;
generate characteristics data for the application based on the service data, wherein the service data is associated with each service request of the set of service requests; and
determine the regulatory tag for the application based on the characteristics data.
12 . The computer system of claim 11 , wherein the program instructions further cause the processor set to:
determine interface data associated with one or more interface components of the application based on the set of service requests, wherein the set of service requests is associated with the application; and
determine a set of regulatory controls associated with each interface component of the one or more interface components based on the characteristics data and the regulatory tag.
13 . The computer system of claim 10 , wherein the program instructions further cause the processor set to:
generate a second textual script associated with the service request based on the regulatory tag for the application;
input the second textual script associated with the service request to the AI model to receive a second output; and
determine the set of controls associated with the service request based on the second output.
14 . The computer system of claim 13 , wherein the program instructions further cause the processor set to:
retrieve a plurality of controls associated with a plurality of regulatory domains; and
determine, using the AI model, the set of controls associated with the service request from the plurality of controls, wherein the set of controls is associated with the application.
15 . The computer system of claim 10 , wherein the program instructions further cause the processor set to generate updated request data associated with the service request upon detection of an invalid service request, wherein the updated request data is generated based on the request data and the set of controls, and wherein the updated request data is compliant with the set of controls.
16 . A computer program product comprising a computer-readable storage medium having program instructions, which when executed by a system, cause the system to:
obtain request data associated with a service request, wherein the service request is associated with an application;
generate a first textual script associated with the service request based on the request data;
input the first textual script associated with the service request to an artificial intelligence (AI) model to receive a first output;
generate classification data associated with the service request based on the first output, the classification data indicative of at least one of an operation associated with the application or a service domain associated with the application;
determine a regulatory tag for the application based on the classification data, wherein the regulatory tag is determined from a set of defined regulatory tags;
determine a set of controls associated with the service request based on the regulatory tag;
validate the request data of the service request against the set of controls associated with the service request; and
execute the service request based on the validation of the service request.
17 . The computer program product of claim 16 , wherein the program instructions further cause the system to:
receive service data associated with each service request of a plurality of service requests, wherein the service data associated with each service request of the plurality of service requests comprises at least one of input format data or endpoint data;
identify a set of service requests from the plurality of service requests based on the service data of each service request of the plurality of service requests, wherein
the set of service requests is associated with the application, and
the set of service requests comprises the service request;
generate characteristics data for the application based on the service data, wherein the service data is associated with each service request of the set of service requests; and
determine the regulatory tag for the application based on the characteristics data.
18 . The computer program product of claim 17 , wherein the program instructions further cause the system to:
determine interface data associated with one or more interface components of the application based on the set of service requests, wherein the set of service requests is associated with the application; and
determine a set of regulatory controls associated with each interface component of the one or more interface components based on the characteristics data and the regulatory tag.