Patent ID: 8244761

Claim:
A computer-implemented method with regard to internal data of an organization having members residing in an electronic database of the organization, the internal data is associated with multiple lines of insurance provided by the organization, the internal data is organized according to each member of the organization and is accessible from the electronic database by way of a user interface, the organization is subject to external review of the internal data thereof by an external entity, the computer-implemented method for restricting access by the external entity to only a defined portion of the internal data of the organization and a system of the organization related to an audit comprising: specifying an identification (ID) of the external entity that is to perform the external review; specifying a time period during which the external review will be conducted; specifying the defined portion of the internal data in the electronic database that the external entity will access by way of the user interface, wherein the defined portion of the internal data is customer data associated with a particular line of insurance provided by the organization related to the audit; supplying information including the specified external entity ID, the time period, and the defined portion of the internal data to a definition tool; receiving from the definition tool a definition file produced thereby, the produced definition file having the supplied information set forth therein in a predetermined format for use by the user interface to ensure that the external entity as identified by the specified ID thereof performs the external review only during the specified time period, only accesses the system of the organization related to the audit, and only accesses the specified defined portion of the internal data in the database of the organization, wherein access for the external entity is denied when the external entity tries to access customer data associated with a line of insurance not related to the audit; and altering the definition file, during the time period in which the audit is being conducted, to restrict access to the specified defined portion of the internal data in response to a change in the specified defined portion of the internal data during the time period in which the audit is being conducted.