Patent ID: 8744895

Claim:
A framework based on a meta-model architecture for managing a plurality of Regulations, Policies and Risks (RPR), the plurality of RPR being managed to support Governance, Risk and Compliance (GRC) requirements of an organization, the plurality of RPR being managed for a plurality of roles of a plurality of users in the organization, the framework comprising: a. a tree module in communication with a microprocessor and operative to define a tree based on a context, the tree being defined for one or more RPR of the plurality of RPR and one or more roles of the plurality of roles, the context describing an application of the one or more RPR, the plurality of RPR being intervened across one or more trees, the tree module comprising: i. a node module in communication with the microprocessor and operative to define a plurality of nodes for each tree, each node of the plurality of nodes being defined based on the context, wherein the one or more nodes are defined on basis of one or more node-types such that a node is an instance of a node-type, further wherein the one or more node-types are defined in form of a data structure; ii. a tree-type module in communication with the microprocessor and operative to define a tree-type in form of a data structure and on basis of the one or more node-types, the tree-type comprising a hierarchical structure of the node-types, the tree-type further comprising a parent-child relationship of the node-types; iii. an attribute group module in communication with the microprocessor and operative to define one or more attribute groups for each node, each attribute group of the one or more attribute groups comprising one or more attributes; iv. an attribute module in communication with the microprocessor and operative to define the one or more attributes, the one or more attributes for managing the at least one RPR, each attribute of the one or more attributes comprising information related to the at least one RPR and is one of: a name, a password, a phone number, a login ID, and a contact address, wherein the plurality of attributes are defined on basis of attribute-types that are based on requirements of the at least one RPR, the attribute-types comprising drop boxes, radio buttons, and text boxes; and b. a report module in communication with the microprocessor and operative to monitor compliance of the organization with the at least one RPR by providing reports related to the at least one RPR to the one or more users in the organization.