Automated framework for managing process controls to improve system performance

1 . A computer-implemented method of an automated framework to detect a vulnerability relative to a control of a system, the method comprising:

obtaining control information related to multiple controls of multiple subsystems of the system,

wherein each control monitors compliance with particular criteria by a particular process or a particular sub-process of a particular subsystem;

wherein the control information includes data of different subsystems in different formats that indicate a quantity, a type, or an operating state for each of the multiple controls of the system;

wherein each subsystem manages associated controls independent of controls associated with other subsystems;

translating the control information, in accordance with a translation table, into a common format to identify any controls associated with a common process or a common sub-process and which include common criteria;

linking the multiple controls in a hierarchical arrangement such that a first level includes the multiple subsystems, a second level includes multiple processes of the multiple subsystems at the first level, and a third level includes multiple sub-process of the multiple processes at the second level,

wherein each process of the second level of the hierarchical arrangement is associated with an end-to-end lifecycle order of the multiple sub-processes of the process,

wherein the third level of the hierarchical arrangement that includes the multiple sub-processes is arranged in accordance with the end-to-end lifecycle order of the multiple sub-processes, and;

wherein each level of the hierarchical arrangement is associated with a different threshold number of controls that defines whether a given process or sub-process in a given level is over-controlled or under-controlled;

generating a risk measure for the system based on the obtained information and the hierarchical arrangement related to a particular control,

wherein the risk measure indicates a vulnerability to a subsystem other than the subsystem of the particular control,

wherein the risk measure includes a scope of risk to the system based on controls other than the particular control, and

wherein the risk measure is generated according to a respective threshold number of controls associated with a particular level of the hierarchical arrangement to which the particular control belongs; and

communicating, to a computing device coupled to the system, at least an indication of the risk measure,

wherein the indication is that at least a portion of the system is over-controlled, is under-controlled, or is noncompliant with the particular control.

2 . The method of claim 1 , wherein the multiple subsystems include a first subsystem with a first process related to originating a user account and a second subsystem with a second process related to servicing the user account, the first subsystem being distinct from the second subsystem, and

wherein a first control of the first process is associated with a first owner and monitors accurateness of user account data relative to the first subsystem, and a second control of the second process is associated with a second owner and monitors accurateness of the user account data relative to the second subsystem, the first control operating independent of the second control, the method further comprising:

causing display, on a display device, of a topological map of the system including the first process and the second process in locations relative to the first and second subsystems,

wherein display of the first process includes a first hyperlink to information related to the first control and the second process includes a second hyperlink to information related to the second control,

wherein the indication is that the second control is duplicative of the first control.

3 . The method of claim 1 , wherein the particular subsystem has a user-defined control to check a particular data and has a systemic control to check user data, and

wherein the indication is that the user-defined control is duplicative of the systemic control because the particular data is user account data.

4 . The method of claim 1 , therein the indication is a first indication, the method further comprising:

generating a second indication that a portion of the system lacks a control; and

causing display of the first and second indications on a topological map of the system, wherein a location of the first and second indications are shown relative to areas of the system that are impacted by control associated with the first and second indications.

5 . The method of claim 1 , wherein the hierarchical arrangement defines a priority order such that a control at a higher-level is prioritized relative to a control at a lower-level of the hierarchical arrangement.

6 . The method of claim 1 , wherein the system is a manufacturing system and the particular control monitors compliance of a process with a manufacturing rule.

7 . The method of claim 1 , wherein the particular control monitors compliance of a financial operation with a financial reporting schedule.

8 . The method of claim 1 , wherein the particular control is a user-defined control that is customized by the user.

9 . The method of claim 1 , wherein the particular control is a systemic control related to processing data for the system.

10 . The method of claim 1 , further comprising:

causing display, on a display device of the computing device, of an interface view including display of:

a series of ordered sub-processes of a particular process according to the end-to-end lifecycle order that is associated with the particular process,

wherein each of the series of ordered sub-processes is presented on a graphical table with associated processes, sub-processes, controls, and related issues; and

content enabling a user to drill down and obtain information related to a selected subsystem, the information including processes and sub-processes of the selected subsystem arranged in a hierarchical structure.

11 . The method of claim 1 , further comprising:

causing display, on a display device of the computing device, of an interface view including display of:

a topological map of processes that are subjected to particular controls; and

indicators of the particular controls over the topological map, wherein a location of any particular indicator is shown relative to a particular process impacted by a control of the particular indicator.

12 . The method of claim 1 , further comprising:

causing display, on a display device of the computing device, of an interface view including display of:

a count of controls;

a count of processes and sub-processes impacted by the multiple controls; and

a mapping of each control to each process or sub-process at each level of the hierarchical arrangement.

13 . The method of claim 1 , further comprising:

causing display, on a display device of the computing device, of an interface view including display of:

a translation of controls in a first domain relative to a second domain.

14 . The method of claim 1 , further comprising:

causing display, on a display device of the computing device, of an interface view including display of:

compliance rules mapped to any controls that implement the compliance rules on a particular subsystem, a particular process, or a particular sub-process,

an association between each of the multiple controls and a respective group of any combination of subsystems, processes, or sub-processes impacted by a particular control,

information about assessments of controls, the information including processes at different levels of the hierarchical arrangement associated with controls, failures, and notes, or

an output indicative of a risk to the system based on the noncompliance by the particular control.

15 . The method of claim 1 , further comprising:

causing display, on a display device of the computing device, of an interface view including display of:

multiple compliance rules; and

an association between any compliance rule and any subsystem, process, or sub-process in the hierarchical arrangement effected by the compliance rule.

16 . The method of claim 1 , further comprising:

causing display, on a display device of the computing device, of an interface view including display of:

a number of assessments of controls;

an indication of any controls that failed any of the assessments; and

an indication of any controls that passed any of the assessments.

17 . The method of claim 1 , further comprising:

causing display, on a display device of the computing device, of an interface view including display of:

information about assessments of controls, the information including processes at different levels of the hierarchical arrangement mapped to controls and associated failures, and notes associated with failures.

18 . The method of claim 1 , further comprising:

causing display, on a display device of the computing device, of an interface view including display of:

a visualization that compares efficiency and effectiveness of the multiple controls, wherein a location of a control on the visualization indicates a measure of relative over-controlling or under-controlling of a process.

19 . At least one non-transitory computer-readable storage medium carrying instructions that, when executed by a computing system, cause the computing system to perform operations that manage a controls framework to monitor multiple controls of multiple processes of a system, the operations comprising:

linking the multiple controls in a hierarchical arrangement with a central management component,

wherein each control of the multiple controls monitors compliance of a particular process of the multiple processes relative to a rule;

wherein the hierarchical arrangement has a first level that defines subsystems of the multiple processes, a second level that defines a process of a subsystem at the first level, and a third level that defines a plurality of sub-processes of the process at the second level,

wherein the process defined at the second level is associated with an end-to-end lifecycle order of the plurality of sub-processes of the process,

wherein the third level of the hierarchical arrangement that defines the plurality of sub-processes is arranged in accordance with the end-to-end lifecycle order of the plurality of sub-processes,

wherein each sub-process is associated with a control of the multiple controls, and

wherein each level of the hierarchical arrangement is associated with a different threshold number of controls that defines whether a given process or sub-process in a given level is over-controlled or under-controlled;

obtaining information about compliance by a particular subsystem, a particular process, or a particular sub-process with a particular control of the multiple controls,

wherein the information indicates a quantity of controls or a type of control relative to at least a portion of the system;

generating an indication, based on the information of the quantity of controls or a type of control, that a portion of the system is over-controlled or under-controlled,

wherein the indication is further based on a respective threshold number of controls associated with a particular level of the hierarchical arrangement to which the portion of the system belongs; and

communicating, by the central management component to a computing device coupled to the system, at least an indication that the portion of the system is over-controlled or under-controlled.

20 . A system of a controls framework for managing multiple controls of multiple processes of an organization, the system comprising:

a processor; and

memory containing instructions that, when executed by the processor, cause the system to:

link the multiple controls in a hierarchical arrangement with a central management component,

wherein each control of the multiple controls monitors compliance of a particular process of the multiple processes with a rule;

wherein the hierarchical arrangement has a first level that defines subsystems of the multiple processes, a second level that defines a process of a subsystem at the first level, and a third level that defines a plurality of sub-processes of the process at the second level,

wherein the process defined at the second level is associated with an end-to-end lifecycle order of the plurality of sub-processes of the process,

wherein the third level of the hierarchical arrangement that defines the plurality of sub-processes is arranged in accordance with the end-to-end lifecycle order of the plurality of sub-processes, and

wherein each sub-process is associated with a control of the multiple controls, and

wherein each level of the hierarchical arrangement is associated with a different threshold number of controls that defines whether a given process or sub-process in a given level is over-controlled or under-controlled;

obtain information about compliance by a particular subsystem, the particular process, or a particular sub-process with a particular control of the multiple controls,

wherein the information indicates a failure or noncompliance with the particular control by at least a portion of the organization;

generate a risk measure for the organization based on the information about failure or noncompliance with the particular control,

wherein the risk measure is further based on a respective threshold number of controls associated with a particular level of the hierarchical arrangement to which the particular process or the particular sub-process belongs; and

communicate, by the central management component to a computing device coupled to the system, at least an indication of the risk measure based on the failure or noncompliance with the particular control.