Patent ID: 7734754

Claim:
A computerized method executable by a processor of a computing device for evaluating a rules system, said rules system applying one or more rules to communication traffic of a group of users for conforming the communication traffic to a communications policy, said method comprising: analyzing a log containing one or more communications previously reviewed by the rules system to determine if the previously reviewed communications in the log conforms to the communications policy, said analyzing comprising determining at least one of the previously viewed communications that is a non-conforming communication which does not conform with the communications policy; identifying one or more of the rules of the rules system violated by the non-conforming communication; analyzing the violating rules to determine a basis for why the violating rules were not effective in conforming the communications in the log to the communications policy; determining modifications to the rules system to facilitate conformance of the communication traffic to the communications policy; applying the determined modifications to the rules system to create a modified rules system; testing the modified rules system and the rules system on the communications in the log with test communications without applying the modified rules system to new communications; determining effectiveness of the modified rules system and of the rules system to conform the test communications to the communication policy, said determining effectiveness comprising evaluating an aggregation risk metric quantifying the potential exposure created by the modified rules system compared to the rules system; and utilizing the modified rules system after determining effectiveness and as a function of the evaluated aggregation risk metric.