Operational risk management of it assets and systems

Patent metadata

Field	Value
Publication number	US-12513061-B2
Application number	US-202418420572-A
Country	US
Kind code	B2
Filing date	Jan 23, 2024
Priority date	Dec 11, 2023
Publication date	Dec 30, 2025
Grant date	Dec 30, 2025

Abstract

A risk classification processing circuit is configured to classify one or more subsets of network elements forming a given managed information technology network. The classification is based on weight values associated with respective ones of a set of classification decision indicators. A risk mitigation processing circuit is configured to cause risk mitigation acts to be carried out on one or more of the network elements forming the given managed information technology network. The risk mitigation processing circuit includes an allocation circuit configured to make processing resources available to process the risk mitigation acts based on the classification by the risk classification processing circuit.

First claim

What is claimed is:

1 . An apparatus comprising:
a risk classification processing circuit configured to classify one or more subsets of network elements forming a given managed information technology network, the classification being based on weight values associated with respective ones of a set of classification decision indicators without awaiting data from events indicating a performance decline has already occurred; and a risk mitigation processing circuit configured to cause risk mitigation acts to be carried out on one or more of the network elements forming the given managed information technology network, wherein the risk mitigation processing circuit includes an allocation circuit configured to make processing resources available to process the risk mitigation acts based on the classification by the risk classification processing circuit; wherein the classification decision indicators comprise static indicators describing the network elements; wherein the network elements comprise network devices, wherein the static indicators describe static specifications of the respective ones of the network devices, and wherein the static specifications are provided in and determined from inventory records of the given managed information technology network; wherein the static specifications are configured to be labeled attributes of the network devices, and wherein the labelled attributes comprise network element configurations; and wherein the labelled attributes include an ecommerce data center for which a high priority weight is assigned, wherein the labelled attributes include a firewall network service for which a high priority weight is assigned, and wherein the labelled attributes include a wide area network (WAN) transport for which a low priority weight is assigned.

2 . The apparatus according to claim 1 , wherein the risk classification processing circuit is configured to place unmatched ranked priorities on the network elements.

3 . The apparatus according to claim 2 , wherein the risk mitigation processing circuit comprising an alert generator configured to cause alerts to be generated to prompt one or more remediation processing circuits to carry out one or more remediation processes.

4 . The apparatus according to claim 2 , wherein the risk mitigation processing circuit comprises one or more remediation processing circuits configured to carry out one or more remediation processes.

5 . The apparatus according to claim 4 , wherein the one or more remediation processes comprise update, patch, and replacement processes.

6 . The apparatus according to claim 2 , wherein the risk classification processing circuit comprises a machine learning processing circuit configured to execute a supervised machine learning process on static indicator weight values of the network elements to rank the network elements for purposes of scheduling risk mitigation acts.

7 . The apparatus according to claim 6 , wherein the apparatus further comprises a graph database with vertices representing respective network elements, and further comprises a device rank data tracker configured to associate the device rank scores for the network elements with their respective vertices.

8 . The apparatus according to claim 6 , the apparatus further comprising a scheduling circuit configured to schedule the risk mitigation acts for the network elements using priority scheduling.

9 . The apparatus according to claim 6 , wherein the machine learning process comprises a LambdaRank process.

10 . The apparatus according to claim 1 , wherein the risk mitigation processing circuit comprising an alert generator configured to cause alerts to be generated to prompt one or more remediation processing circuits to carry out one or more remediation processes.

11 . The apparatus according to claim 1 , wherein the risk mitigation processing circuit comprises one or more remediation processing circuits configured to carry out one or more remediation processes.

12 . The apparatus according to claim 11 , wherein one or more remediation processes comprise update, patch, and replacement processes.

13 . A method comprising:
executing a risk classification process comprising classifying one or more subsets of network elements forming a given managed information technology network, the classification being based on weight values associated with respective ones of a set of classification decision indicators without awaiting data from events indicating a performance decline has already occurred; and executing a risk mitigation process comprising causing risk mitigation acts to be carried out on one or more of the network elements forming the given managed information technology network, wherein the risk mitigation process comprises making processing resources available to process the risk mitigation acts based on the classification; wherein the classification decision indicators comprise static indicators describing the network elements; wherein the network elements comprise network devices, wherein the static indicators describe static specifications of the respective ones of the network devices, and wherein the static specifications are provided in and determined from inventory records of the given managed information technology network; wherein the static specifications are configured to be labeled attributes of the network devices, and wherein the labelled attributes comprise network element configurations; and wherein the labelled attributes include an ecommerce data center for which a high priority weight is assigned, wherein the labelled attributes include a firewall network service for which a high priority weight is assigned, and wherein the labelled attributes include a wide area network (WAN) transport for which a low priority weight is assigned.

14 . A non-transitory computer-readable media encoded to, when executed by a processor to cause:
executing a risk classification process comprising classifying one or more subsets of network elements forming a given managed information technology network, the classification being based on weight values associated with respective ones of a set of classification decision indicators without awaiting data from events indication a performance decline has already occurred; and executing a risk mitigation process comprising causing risk mitigation acts to be carried out on one or more of the network elements forming the given managed information technology network, wherein the risk mitigation process comprises making processing resources available to process the risk mitigation acts based on the classification; wherein the classification decision indicators comprise static indicators describing the network elements; wherein the network elements comprise network devices, wherein the static indicators describe static specifications of the respective ones of the network devices, and wherein the static specifications are provided in and determined from inventory records of the given managed information technology network; wherein the static specifications are configured to be labeled attributes of the network devices, and wherein the labelled attributes comprise network element configurations; and wherein the labelled attributes include an ecommerce data center for which a high priority weight is assigned, wherein the labelled attributes include a firewall network service for which a high priority weight is assigned, and wherein the labelled attributes include a wide area network (WAN) transport for which a low priority weight is assigned.

Assignees

• Jp Morgan Chase Bank N A
• Jpmorgan Chase Bank Na

Inventors

• Algorry David Gabriel
• Gourgoulias Kostis
• Moran Sean
• Guest William Joel
• Peikon Bruce
• Kati Srinivas

Classifications

• H04L41/082

  the condition being updates or upgrades of network functionality · CPC title

• H04L41/16

  using machine learning or artificial intelligence · CPC title

• H04L63/1433

  Vulnerability analysis · CPC title

• H04L41/5074 Primary

  Handling of user complaints or trouble tickets · CPC title