Patent ID: 7747494

Claim:
A computer implemented method of assessing risk associated with one or more assets for a business enterprise by comparing a non-determinative real risk score with a non-determinative simulated risk score, comprising the steps of: providing a compliance management system on one or more computers, wherein said one or more computers are connected to a network of said assets for allowing said compliance management system to access said network; selecting an asset from said assets using the compliance management system; providing a non-linear statistical data model, wherein said non-linear statistical data model is self-trainable using a feedback mechanism; generating said non-determinative real risk score using the non-linear statistical data model by a risk analysis engine associated with the compliance management system, further comprising: collecting one or more risk factors associated with said selected asset; mapping the risk factors to risk factor values; generating said non-determinative real risk score for the asset by providing said risk factor values to said non-linear statistical data model, the non-determinative real risk score being a measure of risk associated with the selected asset; generating said non-determinative simulated risk score using the non-linear statistical data model by said risk analysis engine, comprising: collecting one or more simulated risk factors associated with the selected asset, wherein the simulated risk factors further comprise one or more of simulated risk factors received by a risk simulation module and risk factors configured by a user using a user interface; mapping said simulated risk factors to simulated asset risk values; generating said non-determinative simulated risk score using said simulated asset risk values, wherein the non-determinative simulated risk score is a simulated measure of risk associated with the selected asset if the selected asset were to be associated with the simulated risk factors; and, assessing said risk of the selected asset using the compliance management system, wherein said step of assessing the risk comprises comparing the non-determinative real risk score with the non-determinative simulated risk score by one or more of the compliance management system and said user of the compliance management system using said user interface; whereby assessing the risk of the selected asset by comparing the non-determinative real risk score with the non-determinative simulated risk score enables the user to manage risk and compliancy of the assets of said business enterprise.