Modifying control scopes of controls across a plurality of data processes via data objects

Patent metadata

Field	Value
Publication number	US-12567066-B2
Application number	US-202318322307-A
Country	US
Kind code	B2
Filing date	May 23, 2023
Priority date	May 23, 2023
Publication date	Mar 3, 2026
Grant date	Mar 3, 2026

Abstract

Methods, systems, and non-transitory computer readable storage media are disclosed for managing computing systems according to detect and correct configuration gaps with specific system requirements frameworks. Specifically, the disclosed system accesses a digital data repository to determine attribute values of data objects representing functions or infrastructure associated with handling target data for an entity. The disclosed system determines a digital representation of a system requirements framework that indicates controls associated with handling specific data types. Based on the attribute values and a gap rules set associated with the system requirements framework, the disclosed system determines configuration gaps to be addressed via control actions for installing controls in connection with various data assets or data processes. The disclosed system generates tasks to display via a graphical user interface of a computing device for applying modifications to the data assets and/or data processes to address the configuration gaps.

First claim

What is claimed is:

1 . A method comprising:
determining, by at least one computer processor accessing a digital data repository, a plurality of data objects comprising one or more control objects corresponding to controls and one or more evidence objects corresponding to evidence tasks for a plurality of data processes associated with an entity; determining, by the at least one computer processor, that at least one of the one or more control objects and the one or more evidence objects corresponds to a particular data process of the plurality of data processes involved in a data analysis project that is active; detecting, by the at least one computer processor, a change to a control scope of a control for at least one data process of the plurality of data processes associated with the entity; preventing, by the at least one computer processor and while the data analysis project is active, modification of the one or more control objects and the one or more evidence objects; generating, by the at least one computer processor for display via a graphical user interface of a computing device associated with the entity, an electronic message indicating that the change is on hold while the data analysis project is active; modifying, by the at least one computer processor, the one or more control objects and the one or more evidence objects associated with one or more data processes of the plurality of data processes in response to the change to the control scope of the control; and generating, by the at least one computer processor for display via the graphical user interface, an indication of the change to the control scope according to the one or more control objects or the one or more evidence objects modified in response to the change to the control scope.

2 . The method of claim 1 , wherein detecting the change to the control scope of the control comprises detecting a change to a hierarchy level of the control from a first hierarchy level in a data process hierarchy associated with the plurality of data processes to a second hierarchy level in the data process hierarchy.

3 . The method of claim 2 , wherein:
detecting the change to the hierarchy level of the control comprises determining that the second hierarchy level is above the first hierarchy level in the data process hierarchy; and modifying the one or more control objects and the one or more evidence objects comprises:
merging one or more duplicate control objects into a combined control object according to the second hierarchy level; and
merging one or more duplicate evidence objects into a combined evidence object according to the second hierarchy level.

4 . The method of claim 2 , wherein:
detecting the change to the hierarchy level of the control comprises determining that the second hierarchy level is below the first hierarchy level in the data process hierarchy; and modifying the one or more control objects and the one or more evidence objects comprises modifying a mapping within the one or more control objects and the one or more evidence objects to remove one or more data processes of the at least one data process according to the second hierarchy level.

5 . The method of claim 1 , wherein modifying the one or more control objects and the one or more evidence objects comprises:
determining, by accessing the digital data repository, one or more status values of one or more data analysis projects corresponding to the one or more data processes; and modifying the one or more control objects and the one or more evidence objects in response to determining that the one or more status values indicate that the one or more data analysis projects corresponding to the one or more data processes are inactive.

6 . The method of claim 5 , wherein modifying the one or more control objects and the one or more evidence objects comprises:
monitoring the one or more status values to detect a change in the one or more status values of the one or more data analysis projects to indicate that the one or more data analysis projects are inactive; and modifying the one or more control objects and the one or more evidence objects in response to detecting the change in the one or more status values of the one or more data analysis projects.

7 . The method of claim 1 , wherein:
determining the plurality of data objects comprises integrating a data extraction software application with the digital data repository and a third-party system via an application programming interface associated with the plurality of data objects or the plurality of data processes; and modifying, utilizing the data extraction software application in response to the change to the control scope, the one or more control objects and the one or more evidence objects associated with the one or more data processes by changing one or more attribute values of the one or more control objects and the one or more evidence objects.

8 . The method of claim 1 , wherein modifying the one or more control objects and the one or more evidence objects comprises:
determining that the control scope of the control changes to include one or more additional data processes of the plurality of data processes; modifying one or more additional control objects associated with the one or more additional data processes to include a mapping to the control; and generating, in connection with the control, one or more cloned evidence objects for the one or more additional data processes based on an evidence object associated with the at least one data process.

9 . The method of claim 1 , wherein:
detecting the change to the control scope of the control comprises detecting an interaction with a graphical user interface element corresponding to the control scope of the control; and generating the indication of the change to the control scope comprises toggling a visual status of the graphical user interface element indicating the change to the control scope.

10 . A system comprising:
one or more non-transitory computer readable media comprising a digital data repository; and at least one computer processor configured to cause the system to:
determine, by accessing the digital data repository, a plurality of data objects comprising one or more control objects corresponding to controls and one or more evidence objects corresponding to evidence tasks for a plurality of data processes associated with an entity;
determine that at least one of the one or more control objects and the one or more evidence objects corresponds to a particular data process of the plurality of data processes involved in a data analysis project that is active;
detect a change to a control scope of a control for at least one data process of the plurality of data processes associated with the entity from a first hierarchy level in a data process hierarchy to a second hierarchy level;
prevent, while the data analysis project is active, modification of the one or more control objects and the one or more evidence objects;
generate, for display via a graphical user interface of a computing device associated with the entity, an electronic message indicating that the change is on hold while the data analysis project is active;
determine the one or more control objects and the one or more evidence objects associated with one or more data processes based on the second hierarchy level;
modify the one or more control objects and the one or more evidence objects associated with the one or more data processes in response to the change to the control scope of the control; and
generate, for display via the graphical user interface, an indication of the change to the control scope according to the one or more control objects or the

Assignees

• Onetrust Llc

Inventors

• Kwong Carman
• Murray Patrick Glenn
• Cross Christopher
• Arnett Taylor

Classifications

• G06F3/0482

  Interaction with lists of selectable items, e.g. menus · CPC title

• G06F3/04847

  Interaction techniques to control parameter settings, e.g. interaction with sliders or dials · CPC title

• H04L63/20 Primary

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• G06Q10/067

  Enterprise or organisation modelling · CPC title

• G06Q10/06

  Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling · CPC title