Cross-jurisdiction workload control systems and methods
At design time, cross-jurisdiction workload controls may be presented by a process platform server to a user (e.g., a workload creator or process builder) who is using the process platform to create or update an application having a workload functionality with zero, one, or more applicable regulation controls. If no regulation control is selected, or if there is no exception provided, the process platform server may operate to block the user from proceeding to complete the workload creation process. The application with the workload thus created/updated is delivered to end user(s). Responsive to a user request to open the application on a client device, a server (the process platform server or an application gateway server) may operate to automatically determine whether a target location associated with the user request is permitted in accordance with a cross-jurisdiction workload control associated the workload defined in the application.
1 . A method for cross-jurisdictional workload control enforcement, the method comprising:
at design time,
presenting, by a workload design application, a workload design interface that prompts a workload creator for input regarding a plurality of target locations and corresponding local controls;
determining whether the local controls are available as a condition to allow the workload creator to create a workload;
receiving, by the workload design application via the workload design interface, input indicating whether to turn on or off the local controls for individual ones of the target locations;
monitoring actions of the workload creator and applying local controls for individual ones of the target locations that are turned on to identify tasks that the workload creator attempts to add to the workload that involve cross-jurisdictional movement of data;
blocking an identified task from being added to the workload based on the controls;
creating the workload including tasks that have not been blocked;
unblocking the identified task in response to overriding the local controls; and
adding the identified task to the workload.
2 . The method of claim 1 , further comprising, in response to identifying a first task which the workload creator attempts to add to the workload which involves cross-jurisdictional movement of data, presenting a notification to the workload creator via the workload design interface.
3 . The method of claim 2 , further comprising receiving, by the workload design application via the workload design interface, input responsive to the notification which indicates an exception to one of the local controls that caused the notification, and enabling the first task to be added to the workload.
4 . The method of claim 2 , further comprising receiving, by the workload design application via the workload design interface, input responsive to the notification which indicates an approval to override one of the local controls that caused the notification, and enabling the first task to be added to the workload.
5 . The method of claim 4 , further comprising, in response to receiving the approval to override the one of the local controls that caused the notification, generating an audit record indicative of the approval.
6 . The method of claim 1 , further comprising presenting, by the workload design interface, information for each of the local controls, including information on one or more of:
approvals; regulations; and audit requirements.
7 . The method of claim 1 , further comprising delivering the workload to an application, the application being adapted to enable an end user to execute the workload at runtime.
8 . A system for cross-jurisdictional workload control enforcement, the system comprising:
a processor;
a non-transitory computer-readable medium; and
stored instructions translatable by the processor for:
at design time,
presenting, by a workload design application, a workload design interface that prompts a workload creator for input regarding a plurality of target locations and corresponding local controls;
determining whether the local controls are available as a condition to allow the workload creator to create a workload;
receiving, by the workload design application via the workload design interface, input indicating whether to turn on or off the local controls for individual ones of the target locations;
monitoring actions of the workload creator and applying local controls for individual ones of the target locations that are turned on to identify tasks that the workload creator attempts to add to the workload that involve cross-jurisdictional movement of data;
blocking an identified task from being added to the workload based on the local controls;
creating the workload including tasks that have not been blocked
unblocking the identified task in response to overriding the local controls; and
adding the identified task to the workload.
9 . The system of claim 8 , the stored instructions further translatable by the processor for, in response to identifying a first task which the workload creator attempts to add to the workload which involves cross-jurisdictional movement of data, presenting a notification to the workload creator via the workload design interface.
10 . The system of claim 9 , the stored instructions further translatable by the processor for receiving, by the workload design application via the workload design interface, input responsive to the notification which indicates an exception to one of the local controls that caused the notification, and enabling the first task to be added to the workload.
11 . The system of claim 9 , the stored instructions further translatable by the processor for receiving, by the workload design application via the workload design interface, input responsive to the notification which indicates an approval to override one of the local controls that caused the notification, and enabling the first task to be added to the workload.
12 . The system of claim 11 , the stored instructions further translatable by the processor for, in response to receiving the approval to override the one of the local controls that caused the notification, generating an audit record indicative of the approval.
13 . The system of claim 8 , the stored instructions further translatable by the processor for presenting, by the workload design interface, information for each of the local controls, including information on one or more of: approvals; regulations; and audit requirements.
14 . The system of claim 8 , the stored instructions further translatable by the processor for delivering the workload to an application, the application being adapted to enable an end user to execute the workload at runtime.
15 . A computer program product for cross-jurisdictional workload control enforcement, the computer program product comprising a non-transitory computer-readable medium storing instructions translatable by a computer processor for:
at design time,
presenting, by a workload design application, a workload design interface that prompts a workload creator for input regarding a plurality of target locations and corresponding local controls;
determining whether the local controls are available as a condition to allow the workload creator to create a workload;
receiving, by the workload design application via the workload design interface, input indicating whether to turn on or off the local controls for individual ones of the target locations;
monitoring actions of the workload creator and applying local controls for individual ones of the target locations that are turned on to identify tasks that the workload creator attempts to add to the workload that involve cross-jurisdictional movement of data;
blocking an identified task from being added to the workload based on the local controls;
creating the workload including tasks that have not been blocked
unblocking the identified task in response to overriding the local controls; and
adding the identified task to the workload.
16 . The computer program product of claim 15 , the instructions further translatable by the computer processor for, in response to identifying a first task which the workload creator attempts to add to the workload which involves cross-jurisdictional movement of data, presenting a notification to the workload creator via the workload design interface.
17 . The computer program product of claim 16 , the instructions further translatable by the computer processor for receiving, by the workload design application via the workload design interface, input responsive to the notification which indicates an exception to one of the local controls that caused the notification, and enabling the first task to be added to the workload.
18 . The computer program product of claim 16 , the instructions further translatable by the computer processor for receiving, by the workload design application via the workload design interface, input responsive to the notification which indicates an approval to override one of the local controls that caused the notification, and enabling the first task to be added to the workload.
19 . The computer program product of claim 18 , the instructions further translatable by the computer processor for, in response to receiving the approval to override the one of the local controls that caused the notification, generating an audit record indicative of the approval.
20 . The computer program product of claim 15 , the instructions further translatable by the computer processor for presenting, by the workload design interface, information for each of the local controls, including information on one or more of: approvals; regulations; and audit requirements.