CPC G06F 8/10 (2013.01) [G06F 3/0482 (2013.01); G06F 8/20 (2013.01); G06F 8/30 (2013.01); G06F 8/34 (2013.01); G06F 16/93 (2019.01); G06F 21/54 (2013.01); G06N 5/04 (2013.01); G06N 20/00 (2019.01); G06N 20/20 (2019.01); G06Q 30/018 (2013.01); G06Q 50/26 (2013.01)] | 20 Claims |
1. A system, comprising:
a non-transitory memory; and
one or more hardware processors coupled with the non-transitory memory and configured to read instructions from the non-transitory memory to cause the system to perform operations comprising:
obtaining first data associated with a first obligation, wherein the first data comprises (i) text data and (ii) a set of attributes corresponding to a set of attribute types and associated with the first obligation;
analyzing the first data associated with the first obligation and second data associated with a plurality of stored obligations for which a plurality of controls has been implemented in one or more software processes to mitigate risks associated with the plurality of stored obligations;
determining, from the plurality of stored obligations, a subset of stored obligations based on a result of the analyzing;
identifying, from the plurality of controls, one or more controls that have been implemented in one or more software processes to mitigate risks associated with the subset of stored obligation as control candidates for the first obligation; and
providing, on the user device, a graphical user interface (GUI) that displays the control candidates for the first obligation.
|