Patent ID: 8712813
Filing Date: 2014-04-29
Classification: G06Q

Abstract:
1. A method comprising: displaying, by a computer system, one or more audit units of an enterprise, the one or more audit units including a visual indicator of a risk value and an impact value for each audit unit, the risk value representing a likelihood of one or more risk controls for the audit unit failing, the impact value representing an estimate of the consequences of the one or more risk controls failing; receiving, by the computer system, a selection of an audit unit in the one or more audit units from a user; adding, by the computer system, one or more risk controls for the selected audit unit to an audit project; executing, by the computer system, the audit project based at least in part on calculating an exposure associated with each audit unit, the exposure calculated as a product of the impact value and the risk value for each audit unit, using functions of a workflow-enabled project management application to facilitate auditing of the one or more risk controls for the selected audit unit; wherein displaying the one or more audit units includes: sorting the one or more audit units according to their associated exposures; and displaying the one or more audit units in sorted order.