Methods and apparatus for analyzing social media for enterprise compliance issues

Abstract

In some embodiments, a non-transitory processor-readable medium includes code that causes a processor to receive, at a compliance device, a message from a source communication device addressed to a destination communication device. The code causes the processor to analyze at a context engine, the content of the message to determine a first risk level associated with a preference of an organization. The code further causes the processor to analyze at a regulatory engine, the content of the message to determine a second risk level associated with a regulatory standard of a specific industry and to define a composite risk level based on the first risk level and the second risk level. The code further causes the processor to send a notification to an administrator if the composite risk level satisfies a criterion, and to send the message to the destination communication device irrespective of the composite risk level.

1 . A non-transitory processor-readable medium storing code representing instructions to be executed by a processor, the code comprising code to cause the processor to:
 receive, from a source communication device, a message addressed to a destination communication device;   analyze, at a context engine, content of the message to determine a first risk level associated with the content of the message, the first risk level being associated with a preference of an organization;   analyze, at a regulatory engine, content of the message to determine a second risk level associated with the content of the message, the second risk level being associated with a regulatory standard of a specific industry;   define a composite risk level based at least in part on the first risk level and the second risk level;   send a notification to an administrator if the composite risk level satisfies a criterion; and   send the message to the destination communication device irrespective of the composite risk level.   
     
     
         2 . The non-transitory processor-readable medium of  claim 1 , wherein the code to cause the processor to analyze the content of the message to determine the first risk level includes code to cause the processor to analyze the content of the message for at least one of high risk words, medium risk words, high risk phrases, or medium risk phrases associated with the organization. 
     
     
         3 . The non-transitory processor-readable medium of  claim 1 , wherein the destination communication device is a server associated with at least one of a social media platform or a social media website, the content of the message includes text to be uploaded to the at least one of the social media platform or the social media website. 
     
     
         4 . The non-transitory processor-readable medium of  claim 1 , wherein the message is an electronic mail (email) message. 
     
     
         5 . The non-transitory processor-readable medium of  claim 1 , wherein the code to cause the processor to send the notification includes code to cause the processor to send a risk analysis report based on the first risk level and the second risk level with the notification. 
     
     
         6 . The non-transitory processor-readable medium of  claim 1 , wherein the code to cause the processor to analyze the content of the message to determine the first risk level includes code to cause the processor to analyze the content of the message and an identifier associated with the source communication device to determine the first risk level. 
     
     
         7 . The non-transitory processor-readable medium of  claim 1 , wherein the code to cause the processor to analyze the content of the message to determine the first risk level includes code to cause the processor to analyze the content of the message for a keyword within a specific context. 
     
     
         8 . The non-transitory processor-readable medium of  claim 1 , wherein the code to cause the processor to analyze the content of the message to determine the second risk level includes code to cause the processor to analyze the content of the message based on a structured model that analyzes text against a pattern to determine a regulatory violation. 
     
     
         9 . The non-transitory processor-readable medium of  claim 1 , wherein the code to cause the processor to analyze the content of the message to determine the second risk level includes code to cause the processor to analyze the content of the message based on a channel type associated with the message. 
     
     
         10 .- 24 . (canceled) 
     
     
         25 . A system, comprising:
 a learning module implemented in at least one of a memory or a processor, the learning module configured to receive a set of annotated social interactions related to an industry, the learning module configured to update a signature associated with the industry based on an analysis of the set of annotated social interactions; and   a risk analysis module implemented at a compliance device and including a context engine and a regulatory engine, the context engine configured to receive a social media message related to the industry and to be posted on a social media website, the context engine configured to analyze content of the social media message based on a policy of an organization to generate a first risk level associated with the content of the social media message,   the regulatory engine configured to analyze the content of the social media message based on the signature to generate a second risk level associated with the content of the social media message,   the risk analysis module configured to define a composite risk level associated with the content of the social media message based at least in part on the first risk level and the second risk level,   the compliance device configured to perform an action on the social media message in response to the composite risk level satisfying a criterion indicative of a compliance risk.   
     
     
         26 . The system of  claim 25 , wherein the policy of the organization includes a set of language facets selected for the policy by a representative of the organization, each language facet from the set of language facets is assigned a risk level. 
     
     
         27 . The system of  claim 25 , wherein the compliance device is configured to send the social media message to a server associated with the social media website such that the social media message is posted on the social media website irrespective of the composite risk level. 
     
     
         28 . The system of  claim 25 , wherein the set of annotated social interactions related to the industry are annotated using a crowd sourcing method. 
     
     
         29 . The system of  claim 25 , wherein the composite risk level is a statistical probability that the content of the social media message is a compliance risk. 
     
     
         30 . The system of  claim 25 , wherein the regulatory engine is configured to analyze the content of the social media message based on a channel type associated with the social media message. 
     
     
         31 . The system of  claim 25 , wherein the action includes at least one of locking an attachment associated with the social media message, tracking the attachment associated with the social media message, or sending the social media message to an administrator. 
     
     
         32 . An apparatus, comprising:
 a risk analysis module implemented in at least one of a memory or a processor of a compliance device, the risk analysis module including a context engine and a regulatory engine,   the context engine configured to receive a social media message related to an industry and to be posted on a social media website, the context engine configured to select a policy of an organization based on a channel associated with the social media message, the context engine configured to analyze content of the social media message based on the policy to generate a first risk level associated with the content of the social media message,   the regulatory engine configured to analyze the content of the social media message based on a signature associated with the industry to generate a second risk level associated with the content of the social media message,   the risk analysis module configured to define a composite risk level associated with the content of the social media message based at least in part on the first risk level and the second risk level,   the compliance device configured to perform an action on the social media message in response to the composite risk level satisfying a criterion indicative of a compliance risk.   
     
     
         33 . The apparatus of  claim 32 , wherein the action includes at least one of locking an attachment associated with the social media message, tracking the attachment associated with the social media message, or sending the social media message to an administrator. 
     
     
         34 . The apparatus of  claim 32 , wherein the risk analysis module includes a universal compliance engine configured to analyze the content of the social media message to generate a third risk level associated with at least one of racism, sexism, inappropriate language, inside knowledge sharing, or intellectual policies issues,
 the risk analysis module configured to define the composite risk level based at least in part on the third risk level.   
     
     
         35 . The apparatus of  claim 32 , wherein the compliance device is configured to send the social media message to a server associated with the social media website such that the social media message is posted on the social media website irrespective of the composite risk level.