Detecting and analyzing operational risk in a network environment

1. A system for managing operational risk in a network, comprising:

an interface configured to:

receive a first change request to update a characteristic of a network application, wherein the first change request includes information regarding the network application to be updated and the network application utilizes a network device;

a hardware processor communicatively coupled to the interface, the processor configured to:

calculate a change risk score indicating a risk level of updating the network application in response to the first change request, wherein the change risk score comprises:

a service tier risk score, the service tier risk score calculated at least based on a determination of whether a service affected by the first change request is one of an external service and an internal service, wherein an external service receives a higher risk score than an internal service;

a time risk score, the time risk score calculated based on a determination of whether a transaction volume at a time of day the first change request is to be implemented;

a day risk score, the day risk score calculated based on a determination of whether a transaction volume at a day of the week the first change request is to be implemented;

a security risk score, the security risk score calculated based on a determination of whether the network application is associated with confidential information; and

a mobile device risk score, the mobile device risk score calculated based on a determination of whether the network application is utilized by a mobile user device;

identify a second change request for the network device, wherein the second change request includes information regarding a characteristic of the network device to be updated;

determine the implementation time for the first change request and the implementation time for the second change request overlap;

increase the change risk score in response to determining the implementation time for the first change request and the implementation time for the second change request overlap;

determine whether the change risk score is within a high-risk level; and

in response to determining that the change risk score is within the high-risk level, implement a change counter measure;

wherein:

the interface is further configured to:

communicate an activity feed to a plurality of users associated with the first change request, wherein the activity feed comprises the first change request and the change risk score;

receive one or more comments from the plurality of users regarding the first change request; and

the processor is further configured to adjust the change risk score based on the one or more comments.

2. The system of claim 1 , wherein the processor is further configured to:

adjust the change risk score based on a technology risk score, the technology risk score comprising:

a capacity risk factor, the capacity risk factor determined by measuring a volume of real-time data flow through the network device compared to an operational limit for the network device;

an asset lifecycle factor, the asset lifecycle factor determined by comparing a current operating age of the network device to an expected lifetime of the network device; and

a resiliency risk factor, the resiliency risk factor determined based on a failover capability of the network device during an operational failure.

3. The system of claim 1 , wherein the network device is monitored by a network administrator and the processor is further configured to:

adjust the change risk score based on a network administrator risk score, the network administrator risk score comprising:

an experience risk score, the experience risk score determined based on an experience level of the network administrator monitoring the network device; and

a skillset risk score, the skillset risk score determined based on one or more skillsets held by the network administrator.

4. The system of claim 1 , wherein the change counter measure is one from the group consisting of: upgrading the network device and assigning a plurality of users to monitor an implementation of the first change request.

5. The system of claim 1 , wherein the interface is further configured to communicate a revised change request to update the network application to a user associated with the first change request, and the revised change request comprises a new day of the week for the first change request to be implemented.

6. The system of claim 1 , wherein the change risk score is determined to be a selected one from the group consisting of: a low-risk level, a medium-risk level, and a high-risk level.

7. A method for managing operational risk in a network, comprising:

receiving, at an interface, a first change request to update a characteristic of a network application, wherein the first change request includes information regarding the network application to be updated and the network application utilizes a network device;

calculating, using a processor communicatively coupled to the interface, a change risk score indicating a risk level of updating the network application in response to the first change request, wherein the change risk score comprises:

a service tier risk score, the service tier risk score calculated at least based on a determination of whether a service affected by the first change request is one of an external service and an internal service, wherein an external service receives a higher risk score than an internal service;

a time risk score, the time risk score calculated based on a determination of whether a transaction volume at a time of day the first change request is to be implemented;

a day risk score, the day risk score calculated based on a determination of whether a transaction volume at a day of the week the first change request is to be implemented;

a security risk score, the security risk score calculated based on a determination of whether the network application is associated with confidential information; and

a mobile device risk score, the mobile device risk score calculated based on a determination of whether the network application is utilized by a mobile user device;

identifying, using the processor, a second change request for the network device, wherein the second change request includes information regarding a characteristic of the network device to be updated;

determining, using the processor, the implementation time for the first change request and the implementation time for the second change request overlap;

increasing, using the processor, the change risk score in response to determining the implementation time for the first change request and the second change request overlap;

determining, using the processor, whether the change risk score is within a high-risk level;

in response to determining that the change risk score is within the high-risk level, implementing a change counter measure;

communicating, using the interface, an activity feed to a plurality of users associated with the first change request, wherein the activity feed comprises the first change request and the change risk score;

receiving, using the interface, one or more comments from the plurality of users regarding the first change request; and

adjusting, using the processor, the change risk score based on the one or more comments.

8. The method of claim 7 , further comprising:

adjusting, using the processor, the change risk score based on a technology risk score, the technology risk score comprising:

a capacity risk factor, the capacity risk factor determined by measuring a volume of real-time data flow through the network device compared to an upper operational limit for the network device;

an asset lifecycle factor, the asset lifecycle factor determined by comparing a current operating age of the network device to an expected lifetime of the network device; and

a resiliency risk factor, the resiliency risk factor determined based on a failover capability of the network device during an operational failure.

9. The method of claim 7 , wherein a network administrator monitors the network device, and the method further comprises:

adjusting, using the processor, the change risk score based on a network administrator risk score, the network administrator risk score comprising:

an experience risk score, the experience risk score determined based on an experience level of the network administrator monitoring the network device; and

a skillset risk score, the skillset risk score determined based on one or more skillsets held by the network administrator.

10. The method of claim 7 , wherein the change counter measure is one from the group consisting of upgrading the network device and assigning a plurality of users to monitor an implementation of the first change request.

11. The method of claim 7 , wherein the change risk score is determined to be a selected one from the group consisting of: a low-risk level, a medium-risk level, and a high-risk level.

12. The method of claim 7 , wherein implementing a change counter measure comprises communicating a revised change request to update the network application to a user associated with the first change request, and the revised change request comprises a new day of the week for the first change request to be implemented.

13. A non-transitory computer readable medium comprising logic, the logic operable, when executed by a processor to:

receive a first change request to update a characteristic of a network application, wherein the first change request includes information regarding the network application to be updated and the network application utilizes a network device;

calculate a change risk score indicating a risk level of updating the network application in response to the first change request, wherein the change risk score comprises:

a service tier risk score, the service tier risk score calculated at least based on a determination of whether a service affected by the first change request is one of an external service and an internal service, wherein an external service receives a higher risk score than an internal service;

a time risk score, the time risk score calculated based on a determination of whether a transaction volume at a time of day the first change request is to be implemented;

a day risk score, the day risk score calculated based on a determination of whether a transaction volume at a day of the week the first change request is to be implemented;

a security risk score, the security risk score calculated based on a determination of whether the network application is associated with confidential information; and

a mobile device risk score, the mobile device risk score calculated based on a determination of whether the network application is utilized by a mobile user device;

identify a second change request for the network device, wherein the second change request includes information regarding a characteristic of the network device to be updated;

determine the implementation time for the first change request and the implementation time for the second change request overlap;

increase the change risk score in response to determining the implementation time for the first change request and the implementation time for the second change request overlap;

determine whether the change risk score is within a high risk level; and

in response to determining that the change risk score is within the high-risk level, implement a change counter measure;

communicate an activity feed to a plurality of users associated with the first change request, wherein the activity feed comprises the first change request and the change risk score;

receive one or more comments from the plurality of users regarding the first change request; and

adjust the change risk score based on the one or more comments.

14. The non-transitory computer readable medium of claim 13 , further comprising:

adjust the change risk score based on a technology risk score, the technology risk score comprising:

a capacity risk factor, the capacity risk factor determined by measuring a volume of real-time data flow through the network device compared to an upper operational limit for the network device;

an asset lifecycle factor, the asset lifecycle factor determined by comparing a current operating age of the network device to an expected lifetime of the network device; and

a resiliency risk factor, the resiliency risk factor determined based on a failover capability of the network device during an operational failure.

15. The non-transitory computer readable medium of claim 13 , wherein the network device is monitored by a network administrator, and the non-transitory computer readable medium further comprises:

adjust the change risk score based on a network administrator risk score, the network administrator risk score comprising:

an experience risk score, the experience risk score determined based on an experience level of the network administrator monitoring the network device; and

a skillset risk score, the skillset risk score determined based on one or more skillsets held by the network administrator.

16. The non-transitory computer readable medium of claim 13 , wherein the change counter measure is one from the group consisting of upgrading the network device and assigning a plurality of users to monitor an implementation of the first change request.

17. The non-transitory computer readable medium of claim 13 , wherein the change risk score is determined to be a selected one from the group consisting of: a low-risk level, a medium-risk level, and a high-risk level.