Category-Driven Risk Identification

摘要

Determining risk associated with a product may comprise identifying a product to be supplied to an entity. A product category associated with the product that is one of a plurality of predetermined product categories is determined. A plurality of risk element associated with the product according to the product category is retrieved from a category standards database. A risk level associated with the product category for each of the plurality of risk elements is determined. An inherent risk associated with the product is calculated according to the risk level determined for each of the plurality of risk elements from the category standards database and independent of any vendor selected to supply product.

主权项

1. A management server, comprising:
a memory comprising rules for determining risk associated with a product; and a processor communicatively coupled to the memory and operable to:
identify the product to be supplied to an entity;determine a product category associated with the product that is one of a plurality of predetermined product categories;retrieve a plurality of risk elements associated with the product according to the product category from a category standards database;determine a risk level associated with the product category for each of the plurality of risk elements; andcalculate an inherent risk associated with the product according to the risk level determined for each of the plurality of risk elements from the category standards database and independent of any vendor selected to supply product.