Managing proof assets for validating program compliance

Abstract

A program model that includes requirements and control objects associated with requirements, workflows, proof assets. Workflow tasks associated with the workflows may generate requests to collect each proof asset associated with the control objects. Workflow tasks may validate each collected proof asset based on the plurality of control objects associated with each collected proof asset. Workflow tasks may determine completed control objects based on the validated proof assets. Workflow tasks may employ an amount of the completed control objects that is equivalent to the amount of the control objects associated with the program model to provide a report indicating that the requirements associated with the program model may be satisfied. Workflow tasks may employ detection of modifications to the validated proof assets to determine a portion of the workflow tasks based on the modified proof assets such that the portion of the workflow tasks may be re-executed.

What is claimed as new and desired to be protected by Letters Patent of the United States is: 
     
         1 . A method for managing data using one or more network computers, comprising:
 providing one or more compliance requirements and one or more control objects, wherein each control object is associated with the one or more compliance requirements, and one or more proof assets;   employing a model to execute a plurality of actions, including:
 classifying the one or more proof assets that have an association with the one or more control objects; 
 validating the one or more classified proof assets based on association with the one or more control objects, and 
 determining one or more completed control objects based on the one or more validated proof assets; and 
   in response to completion of the one or more compliance requirements, providing a report based on the one or more completed control objects, wherein information associated with the one or more proof assets is described by one or more of a time, language, currency, or calendar formatting for use in providing other information included in the one or more completed control objects for the report.   
     
     
         2 . The method of  claim 1 , wherein classifying the one or more proof assets further comprises:
 employing one or more of a heuristic classifier or a machine learning classifier to determine a trust score each proof asset; and   wherein validation of the one or more classified proof assets is further based on each trust score.   
     
     
         3 . The method of  claim 1 , wherein the providing the one or more control objects, further comprises:
 employing control information to determine one or more of a plurality of existing control objects to associate with at least a portion of the one or more compliance requirements; and   generating one or more new control objects to associate with a remainder portion of the one or more compliance requirements.   
     
     
         4 . The method of  claim 1 , further comprising:
 employing one or more electronic devices to provide geolocation information that is based on one or more of externally provided information, including Global Positioning Systems (GPS), assisted GPS (AGPS), Enhanced Observed Time Difference (E-OTD), Cell Identifier (CI), Service Area Identifier (SAI), Enhanced Timing Advance (ETA), Base Station Subsystem (BSS), Media Access Control (MAC) address, or Internet Protocol (IP) address; and   wherein the geolocation information is additional information employed to describe one or more of the time, language, currency, or calendar formatting for use in providing the report.   
     
     
         5 . The method of  claim 1 , further comprising:
 employing detection of one or more modifications to the one or more validated proof assets to perform further actions, including:
 re-determining each of the one or more completed control objects that are affected by the one or more modifications to be an uncompleted control object; and 
 re-executing each task associated with each uncompleted control object, wherein the re-executing includes restarting a workflow for those modified proof assets that are associated with one or more uncompleted control objects. 
   
     
     
         6 . The method of  claim 1 , wherein the provided report includes one or more of documents, asset classification, user interfaces, reports, internal processes, or databases. 
     
     
         7 . The method of  claim 1 , wherein providing the report, further comprises:
 indicating that at least a portion of the one or more compliance requirements are completed based on an amount of the completed control objects.   
     
     
         8 . A system for managing data using one or more network computers on a network, comprising:
 a network computer, comprising:
 a memory that stores at least instructions; and 
 one or more processors that execute instructions that perform actions, including:
 providing one or more compliance requirements and one or more control objects, wherein each control object is associated with the one or more compliance requirements, and one or more proof assets; 
 employing a model to execute a plurality of actions, including:
 classifying the one or more proof assets that have an association with the one or more control objects; 
 validating the one or more classified proof assets based on association with the one or more control objects, and 
 determining one or more completed control objects based on the one or more validated proof assets; and 
 
 
   in response to completion of the one or more compliance requirements, providing a report based on the one or more completed control objects, wherein information associated with the one or more proof assets is described by one or more of a time, language, currency, or calendar formatting for use in providing other information included in the one or more completed control objects for the report; and   a client computer, comprising:
 another transceiver that communicates over the network; 
 another memory that stores at least instructions; and 
 one or more processors that execute instructions that perform actions, including:
 providing one or more of the collected proof assets. 
 
   
     
     
         9 . The system of  claim 8 , wherein classifying the one or more proof assets further comprises:
 employing one or more of a heuristic classifier or a machine learning classifier to determine a trust score each proof asset; and   wherein validation of the one or more classified proof assets is further based on each trust score.   
     
     
         10 . The system of  claim 8 , wherein the providing the one or more control objects, further comprises:
 employing control information to determine one or more of a plurality of existing control objects to associate with at least a portion of the one or more compliance requirements; and   generating one or more new control objects to associate with a remainder portion of the one or more compliance requirements.   
     
     
         11 . The system of  claim 8 , further comprising:
 employing one or more electronic devices to provide geolocation information that is based on one or more of externally provided information, including Global Positioning Systems (GPS), assisted GPS (AGPS), Enhanced Observed Time Difference (E-OTD), Cell Identifier (CI), Service Area Identifier (SAI), Enhanced Timing Advance (ETA), Base Station Subsystem (BSS), Media Access Control (MAC) address, or Internet Protocol (IP) address; and   wherein the geolocation information is additional information employed to describe one or more of the time, language, currency, or calendar formatting for use in providing the report.   
     
     
         12 . The system of  claim 8 , further comprising:
 employing detection of one or more modifications to the one or more validated proof assets to perform further actions, including:
 re-determining each of the one or more completed control objects that are affected by the one or more modifications to be an uncompleted control object; and 
 re-executing each task associated with each uncompleted control object, wherein the re-executing includes restarting a workflow for those modified proof assets that are associated with one or more uncompleted control objects. 
   
     
     
         13 . The system of  claim 8 , wherein the provided report includes one or more of documents, asset classification, user interfaces, reports, internal processes, or databases. 
     
     
         14 . The system of  claim 8 , wherein providing the report, further comprises:
 indicating that at least a portion of the one or more compliance requirements are completed based on an amount of the completed control objects.   
     
     
         15 . A processor readable non-transitory storage media that includes instructions for managing data over a network, wherein execution of the instructions by one or more processors performs actions, comprising:
 providing one or more compliance requirements and one or more control objects, wherein each control object is associated with the one or more compliance requirements, and one or more proof assets;   employing a model to execute a plurality of actions, including:
 classifying the one or more proof assets that have an association with the one or more control objects; 
 validating the one or more classified proof assets based on association with the one or more control objects, and 
 determining one or more completed control objects based on the one or more validated proof assets; and 
   in response to completion of the one or more compliance requirements, providing a report based on the one or more completed control objects, wherein information associated with the one or more proof assets is described by one or more of a time, language, currency, or calendar formatting for use in providing other information included in the one or more completed control objects for the report.   
     
     
         16 . The processor readable non-transitory storage media of  claim 15 , wherein classifying the one or more proof assets further comprises:
 employing one or more of a heuristic classifier or a machine learning classifier to determine a trust score each proof asset; and   wherein validation of the one or more classified proof assets is further based on each trust score.   
     
     
         17 . The processor readable non-transitory storage media of  claim 15 , wherein the providing the one or more control objects, further comprises:
 employing control information to determine one or more of a plurality of existing control objects to associate with at least a portion of the one or more compliance requirements; and   generating one or more new control objects to associate with a remainder portion of the one or more compliance requirements.   
     
     
         18 . The processor readable non-transitory storage media of  claim 15 , further comprising:
 employing one or more electronic devices to provide geolocation information that is based on one or more of externally provided information, including Global Positioning Systems (GPS), assisted GPS (AGPS), Enhanced Observed Time Difference (E-OTD), Cell Identifier (CI), Service Area Identifier (SAI), Enhanced Timing Advance (ETA), Base Station Subsystem (BSS), Media Access Control (MAC) address, or Internet Protocol (IP) address; and   wherein the geolocation information is additional information employed to describe one or more of the time, language, currency, or calendar formatting for use in providing the report.   
     
     
         19 . The processor readable non-transitory storage media of  claim 15 , further comprising:
 employing detection of one or more modifications to the one or more validated proof assets to perform further actions, including:
 re-determining each of the one or more completed control objects that are affected by the one or more modifications to be an uncompleted control object; and 
 re-executing each task associated with each uncompleted control object, wherein the re-executing includes restarting a workflow for those modified proof assets that are associated with one or more uncompleted control objects. 
   
     
     
         20 . The processor readable non-transitory storage media of  claim 15 , wherein providing the report, further comprises:
 indicating that at least a portion of the one or more compliance requirements are completed based on an amount of the completed control objects.