Patent ID: 6895383
Filing Date: 2005-05-17
Classification: G06Q

Abstract:
1. A computer-implemented method for assessing a single value representative of an overall risk in at least part of an information technology system comprising: (a) assigning individual risks to bands of varying severity in a risk echelon; (b) determining the current overall risk value by calculating a mean risk value of the highest severity risk band containing a risk by utilizing at least one computer having a risk analysis program; (c) for each additional risk in said highest severity risk band, adding a first percentage of the space between the current overall risk value and the upper limit of the highest severity band by utilizing the risk analysis program; (d) for each existing risk in bands below the band of highest severity risk, adding a second percentage of the space between the current overall risk value and the upper limit of the highest severity band multiplied by a coefficient factor relative to the proportionate level of risks in the respective bands by utilizing the risk analysis program; (e) outputting an indication of the current overall risk in a humanly readable form; and (f) based on the overall risk, identifying a modification to the information technology system.