Patent ID: 7603283

Claim:
A method of managing risk with the aid of a computer system, said method comprising: a. obtaining risk information associated with at least one risk and at least one subrisk associated with the at least one risk; b. using a computer system to calculate at least one risk measurement score for the least one risk; c. using the computer system to calculate at least one risk measurement score for the at least one subrisk, wherein the at least one risk measurement score for the at least one subrisk comprises at least one non-compliant rating identifying non-compliance, said method further comprising the steps of: i. for each said subrisk having a non-compliant rating, receiving a signal indicating whether the said non-compliant rating is accepted or not accepted; and ii. for each said non-compliant subrisk which is indicated as not accepted, generating an action plan comprising a target date; d. using the computer system to generate an overall risk assessment score using the risk measurement score for the least one risk and the risk measurement score for the at least one subrisk; e. using the computer to calculate an expected compliance score for one or more future dates based on said target date; f. using the computer to calculate an actual compliance score for said target date; and g. using the computer to display the expected compliance score versus said actual compliance score for said target date.