International Business Machines Corporation

Harold Moss

Mary Ellen Zurko

Steven A Bade

A method, system and computer-usable medium for a policy validator that automates the validation of existing or proposed policies. A segmented questionnaire wizard is implemented to guide a policy creator through a series of policy-related questions, resulting in the automated generation of a questionnaire used for validating the policy. The resulting validation questionnaire is automatically distributed to predetermined subject matter experts and individuals affected by the policy, whose responses are then analyzed and scored by the policy validator to determine the validity of the policy. If the resulting validation score is within a predetermined, acceptable range, the policy is approved and released for implementation. Otherwise, the process is repeated until an acceptable validation score is achieved.

Segmented questionnaire validation of business rules based on scoring

A system, and computer usable program product for securing asynchronous client server transactions are provided in the illustrative embodiments. A request including an application identifier and a version of a second application is received at a first application. A service identifier is generated if a session with the second application is valid. A registry is generated at the first application. A catalog is generated based on the registry and the service identifier and the catalog are sent to the second application. A sub-request including the service identifier is received as part of an asynchronous client server transaction. Validity of the sub-request is determined by determining whether the service identifier has expired, whether the sub-request requests a service that is permissible according to the catalog, whether the service identifier is used in conjunction with the second application, or a combination thereof. If the sub-request is valid, the service is provided.

Securing asynchronous client server transactions

A method for securing asynchronous client server transactions is provided in the illustrative embodiments. A request including an application identifier and a version of a second application is received at a first application. A service identifier is generated if a session with the second application is valid. A registry is generated at the first application. A catalog is generated based on the registry and the service identifier and the catalog are sent to the second application. A sub-request including the service identifier is received as part of an asynchronous client server transaction. Validity of the sub-request is determined by determining whether the service identifier has expired, whether the sub-request requests a service that is permissible according to the catalog, whether the service identifier is used in conjunction with the second application, or a combination thereof. If the sub-request is valid, the service is provided.

A method, apparatus and computer-usable medium for a policy guidance system comprising one or more Cartesian coordinate plots of a policy's adherence and compliance guidelines. One or more segmented questionnaires are created, comprising a range of weighted responses, that are electronically distributed to one or more predetermined reviewers such as, but not limited to, policy makers or enforcers. Responses to the questionnaire are aggregated, statistically analyzed and scored to derive quantitative values that are then graphically plotted as one or more coordinates in a Cartesian format. The resulting graphical depiction of the policy's guidance parameters is then presented such that it facilitates a policy viewer's comprehension of the possible implications of noncompliance.

Method for discerning and communicating organization's culture/posture towards business environment through segmented questionnaires

A method, apparatus and computer-usable medium for a virtual policy control router, comprising applicable control elements relating to one or more external or internal policies. Two or more policy control repositories are aggregated to create a virtual policy control router, accessible and navigable by users to provide relevant and applicable control elements for establishing policy compliance initiatives. One or more agents are implemented as a web service comprising a services oriented architecture (SOA) to access policy control elements in their native repositories. The web service agent communicates policy control information to the virtual policy control router, contingent upon each control repository's existing security model and access controls. As policy control information is received from each web service agent, it is relationally associated with predetermined users and/or initiatives by the virtual policy control router.

Growing community of inventors

Danvers, MA, United States of America

Harold Moss