Data processing systems and communication systems and methods for the efficient generation of risk assessments
Computer implemented methods, according to various embodiments, comprise: (1) integrating a privacy management system with DLP tools; (2) using the DLP tools to identify sensitive information that is stored in computer memory outside of the context of the privacy management system; and (3) in response to the sensitive data being discovered by the DLP tool, displaying each area of sensitive data to a privacy officer (e.g., similar to pending transactions in a checking account that have not been reconciled). A designated privacy officer may then select a particular entry and either match it up (e.g., reconcile it) with an existing data flow or campaign in the privacy management system, or trigger a new privacy assessment to be done on the data to capture the related privacy attributes and data flow information.
1. A method comprising:
providing, by a computing hardware, a threshold risk assessment to a user that includes a first set of questions for first question/answer pairings that identify characteristics of a set of operations performed by an entity;
receiving, by the computing hardware, respective answers for the first question/answer pairings regarding the characteristics of the set of operations;
determining, by the computing hardware, a threshold risk rating for the set of operations that identifies a level of risk for one or more of the characteristics indicated in the first question/answer pairings, wherein determining the threshold risk rating for the set of operations comprises determining a risk level based on the characteristics;
comparing, by the computing hardware, the threshold risk rating to a threshold risk level, the threshold risk level indicating a pre-determined level of risk regarding the characteristics of the set of operations;
determining, by the computing hardware, that the threshold risk rating satisfies the threshold risk level;
responsive to determining that the threshold risk rating satisfies the threshold risk level:
generating, by the computing hardware, a graphical user interface by configuring a display element and a navigation element on the graphical user interface, wherein:
the display element is configured for presenting an indication of the threshold risk rating; and
the navigation element is configured for initiating an impact assessment comprising a second set of questions for second question/answer pairings that identify risk characteristics of the set of operations, wherein the second set of questions comprises questions that are different from questions within the first set of questions; and
providing, by the computing hardware, the graphical user interface for display on a user computing device;
detecting, by the computing hardware, selection of the navigation element;
responsive to detecting the selection of the navigation element, initiating, by the computing hardware, the impact assessment on the user computing device by;
receiving, by the computing hardware via the graphical user interface, data responsive to the second set of questions in the impact assessment for inclusion in the second question/answer pairings;
determining, by the computing hardware, a second risk rating based on the second question/answer parings by:
determining a weighting factor for each of the second question/answer pairings;
determining a relative risk rating for each of the second question/answer pairings; and
determining the second risk rating based upon the relative risk rating and the weighting factor for each of the second question/answer pairings; and
responsive to determining that the second risk rating does not satisfy the threshold risk level;
storing, by the computing hardware, an indication that the set of operations is a low risk set of operations; and
modifying, by the computing hardware, the display element to present an indication of the second risk rating.
2. The method of claim 1 , wherein at least one weighting factor for at least one of the second question/answer pairings is based on criteria comprising a nature of information associated with the set of operations.
3. The method of claim 1 , wherein the set of operations involves an initiative being conducted by the entity to meet a standard and the characteristics of the set of operations comprises a maturity of the entity in meeting the standard.
4. The method of claim 1 , wherein determining the weighting factor for each of the second question/answer pairings comprises:
determining that a first question in the second set of questions identifies a greater risk impact for the set of operations than a second question in the second set of questions; and
assigning a first weighting factor to a first particular question/answer pairing of the second question/answer pairings associated with the first question that is greater than a second weighting factor assigned to a second particular question/answer pairing of the second question/answer pairings associated with the second question.
5. The method of claim 1 , wherein determining that the threshold risk rating satisfies the threshold risk level comprises:
determining that a particular question/answer pairing of the first question/answer pairings comprises an answer that provides a particular response; and
responsive to determining that the answer comprises the particular response, determining that the threshold risk rating exceeds the threshold risk level.
6. The method of claim 1 , wherein, responsive to determining that the threshold risk rating satisfies the threshold risk level, the method further comprises providing, by the computing hardware, a notification to personnel associated with the set of operations to indicate that the threshold risk rating satisfies the threshold risk level.
7. The method of claim 1 , wherein the threshold risk rating is based on a type of set of operations for the set of operations.
8. A system comprising:
a non-transitory computer-readable medium storing instructions; and
a processing device communicatively coupled to the non-transitory computer-readable medium,
wherein, the processing device is configured to execute the instructions and thereby perform operations comprising:
processing respective answers for a first question/answer pairings that identify characteristics of a set of operations performed by an entity, wherein the respective answers are associated with a first set of questions provided in a threshold risk assessment for the first question/answer pairings;
determining, based on processing the respective answers for the first question/answer pairings, a threshold risk rating for the set of operations that identifies a level of risk for one or more of the characteristics indicated in the first question/answer pairings, wherein determining the threshold risk rating for the set of operations comprises determining a risk level based on the characteristics;
determining that the threshold risk rating satisfies a threshold risk level indicating a pre-determined level of risk regarding the characteristics of the set of operations;
responsive to determining that the threshold risk rating satisfies the threshold risk level:
generating a graphical user interface by configuring a display element and a navigation element on the graphical user interface, wherein:
the display element is configured for presenting an indication of the threshold risk rating; and
the navigation element is configured for initiating processing of second question/answer pairings to generate a second risk rating, wherein the second question/answer pairings identify risk characteristics of the set of operations and are associated with a second set of questions provided in an impact assessment;
providing the graphical user interface for display on a user computing device;
detecting selection of the navigation element;
responsive to detecting the selection of the navigation element, processing the second question/answer parings by:
determining a weighting factor for each of the second question/answer pairings;
determining a relative risk rating for each of the second question/answer pairings; and
determining the second risk rating based upon the relative risk rating and the weighting factor for each of the second question/answer pairings; and
responsive to determining that the second risk rating does not satisfy the threshold risk level, storing an indication that the set of operations is a low risk set of operations.
9. The system of claim 8 , wherein at least one weighting factor for at least one of the second question/answer pairings is based on criteria comprising a nature of information associated with the set of operations.
10. The system of claim 8 , wherein the set of operations involves an initiative being conducted by the entity to meet a standard and the characteristics of the set of operations comprises a maturity of the entity in meeting the standard.
11. The system of claim 8 , wherein determining the weighting factor for each of the second question/answer pairings comprises:
determining that a first question in the second set of questions identifies a greater risk impact for the set of operations than a second question in the second set of questions; and
assigning a first weighting factor to first particular question/answer pairing of the second question/answer pairings associated with the first question that is greater than a second weighting factor assigned to a second particular question/answer pairing of the second question/answer pairings associated with the second question.
12. The system of claim 8 , wherein determining that the threshold risk rating satisfies the threshold risk level comprises:
determining that a particular question/answer pairing of the first question/answer pairings comprises an answer that provides a particular response; and
responsive to determining that the answer comprises the particular response, determining that the threshold risk rating exceeds the threshold risk level.
13. The system of claim 8 , wherein, responsive to determining that the threshold risk rating satisfies the threshold risk level, the operations further comprise providing a notification to personnel associated with the set of operations to indicate that the threshold risk rating satisfies the threshold risk level.
14. The system of claim 8 , wherein the threshold risk rating is based on a type of set of operations for the set of operations.
15. A non-transitory computer-readable medium having program code that is stored thereon, the program code executable by one or more processing devices for performing operations comprising:
processing first question/answer pairings that identify characteristics of a set of operations performed by an entity, wherein the first question/answer pairings are associated with a first set of questions provided in a threshold risk assessment;
determining, based on processing the first question/answer pairings, a threshold risk rating for the set of operations that identifies a level of risk for one or more of the characteristics indicated in the first question/answer pairings;
determining that the threshold risk rating satisfies a threshold risk level indicating a pre-determined level of risk regarding the characteristics of the set of operations;
responsive to determining that the threshold risk rating satisfies the threshold risk level:
generating a graphical user interface by configuring a display element and a navigation element on the graphical user interface, wherein:
the display element is configured for presenting an indication of the threshold risk rating; and
the navigation element is configured for initiating processing of second question/answer pairings to generate a second risk rating, wherein the second question/answer pairings identify risk characteristics of the set of operations and are associated with a second set of questions provided in an impact assessment;
providing the graphical user interface for display on a user computing device;
detecting selection of the navigation element;
responsive to detecting the selection of the navigation element, processing the second question/answer parings by:
determining a weighting factor for each of the second question/answer pairings;
determining a relative risk rating for each of the second question/answer pairings; and
determining the second risk rating based upon the relative risk rating and the weighting factor for each of the second question/answer pairings; and
responsive to determining that the second risk rating does not satisfy the threshold risk level, storing an indication that the set of operations is a low risk set of operations.
16. The non-transitory computer-readable medium of claim 15 , wherein at least one weighting factor for at least one of the second question/answer pairings is based on criteria comprising a nature of information associated with the set of operations.
17. The non-transitory computer-readable medium of claim 15 , wherein the set of operations involves an initiative being conducted by the entity to meet a standard and the characteristics of the set of operations comprises a maturity of the entity in meeting the standard.
18. The non-transitory computer-readable medium of claim 15 , wherein determining the weighting factor for each of the second question/answer pairings comprises:
determining that a first question in the second set of questions identifies a greater risk impact for the set of operations than a second question in the second set of questions; and
assigning a first weighting factor to a first particular question/answer pairing of the second question/answer pairings associated with the first question that is greater than a second weighting factor assigned to a second particular question/answer pairing of the second question/answer pairings associated with the second question.
19. The non-transitory computer-readable medium of claim 15 , wherein determining that the threshold risk rating satisfies the threshold risk level comprises:
determining that a particular question/answer pairing of the first question/answer pairings comprises an answer that provides a particular response; and
responsive to determining that the answer comprises the particular response, determining that the threshold risk rating exceeds the threshold risk level.
20. The non-transitory computer-readable medium of claim 15 , wherein, responsive to determining that the threshold risk rating satisfies the threshold risk level, the operations further comprise providing a notification to personnel associated with the set of operations to indicate that the threshold risk rating satisfies the threshold risk level.