Patent ID: 8473318

Claim:
A method for determining a risk score, the method comprising: receiving, at a computing device, first information associated with an agent executing an action via an application, wherein the action comprises the agent accessing, via the application, one or more information elements associated with an account, wherein the agent is associated with an entity that manages the account, wherein the agent does not own the account; receiving, from a data system, second information associated with the agent, wherein the second information comprises one or more entitlements granted to the agent by the entity; and determining, via a computing device processor, a first risk score based at least partially on the first information and the second information, wherein the first risk score is higher if the agent was not entitled to execute the action and the first risk score is lower if the agent was entitled to execute the action, wherein the first risk score is higher if the agent edited an information element associated with the account and the first risk score is lower if the agent read an information element associated with the account.