TWM639005U - Financial regulatory compliance process management device and system - Google Patents

Abstract

A financial regulatory compliance process management device and system are provided. The financial regulatory compliance process management device includes a storage, a communication interface, and a processor. The storage is configured to store a plurality of service data, wherein each of the plurality of service data corresponds to at least one category. Each of the categories represents one of a plurality of financial services, and each of the plurality of service data includes a regulation data of the corresponding category. The processor is configured to receive a service data request, wherein the service data request corresponds to a requested category of the categories. The processor is further configured to transmit at least one requested service data corresponding to the requested category of the plurality of service data to a terminal.

Description

Financial compliance operation management device and system

This disclosure relates to a management device and system, in particular to a financial compliance operation management device and system.

In order to comply with regulations, before a bank launches a new product, service or business, it must fill out a financial law compliance assessment form. However, the content of the assessment form is complicated and difficult to understand. Each time the personnel who fill it out have to spend time learning how to write it, making sometimes Continuous rewriting during the review process is time-consuming and manpower-consuming, and it is difficult to pass on experience.

In view of this, how to make financial legal compliance assessment operations more convenient and efficient is an urgent goal for the industry.

In order to solve the above problems, this disclosure proposes a financial compliance operation management device, which includes a storage, a communication interface and a processor. The storage is used to store a plurality of business data, wherein each of the business data corresponds to a category representing one of the plurality of financial businesses, and each of the business data includes a regulation corresponding to the category material. The communication interface is communicatively connected to a terminal device for transmitting a service-related data to the terminal device. The processor is coupled to the storage and the communication interface, and is used to perform the following operations: receive a business data request, wherein the business data request corresponds to one of the types of requests; and according to the business data request corresponding to the request category, sending at least one request service data corresponding to the request category among the service data to the terminal device.

This disclosure also proposes a financial compliance operation management system, which includes a terminal device and a financial compliance operation management device. The terminal device includes a user interface, and the user interface is used to provide a user with service-related data received by the terminal device. The financial compliance operation management device includes a storage, a communication interface and a processor. The storage is used to store a plurality of business data, wherein each of the business data corresponds to a category representing one of the plurality of financial businesses, and each of the business data includes a regulation corresponding to the category material. The communication interface is communicatively connected to the terminal device for transmitting a service-related data to the terminal device. The processor is coupled to the storage and the communication interface, and is used to perform the following operations: receive a business data request, wherein the business data request corresponds to one of the types of requests; and according to the business data request corresponding to the request category, sending at least one request service data corresponding to the request category among the service data to the terminal device.

In order to make the description of the present disclosure more detailed and complete, reference may be made to the accompanying drawings and various embodiments described below, and the same numbers in the drawings represent the same or similar elements.

Please refer to FIG. 1 , which is a schematic diagram of a financial compliance operation management device 100 according to the first embodiment of the present disclosure. The financial compliance operation management device 100 is used to transmit corresponding business data to a terminal device of a user according to a request of a user. The financial compliance operation management device 100 includes a storage 120 , a processor 140 and a communication interface 160 .

The storage 120 is used to store a plurality of business data, each of which corresponds to a category, wherein the categories represent one of the plurality of financial services. In some embodiments, the categories include at least one of a mobile network banking category, an online banking category, an electronic payment category, an automated teller machine category, and a network automated teller machine category or a combination thereof.

Each of the business data includes a corresponding legal data of the category. In some embodiments, the business data include at least one or a combination of a legal compliance assessment data, a compliance operation data, and a legal interpretation data corresponding to the categories. In one embodiment, each of the business data also includes the legal provisions cited by the corresponding type of past operations.

In one embodiment, in order to comply with the provisions of the Personal Data Protection Law, the bank needs to assess whether its internal training, operating procedures, service content and other organizational aspects comply with the regulations in the process of collecting, processing and utilizing personal data . Therefore, these business materials may include a personal data protection impact assessment form, which includes multiple assessment principles (for example: notification principle), multiple assessment items corresponding to each of these assessment principles (for example: direct Notification timing and procedures for collection) and multiple inspection items corresponding to each of these evaluation items (for example: are you aware of the notification procedures, mechanisms, objects, and precautions for incidents related to personal data leakage?), the impact of personal data protection The evaluation form provides the bank personnel with various aspects and project evaluation guidelines during the evaluation process. Furthermore, the bank personnel can take stock of these inspection items one by one to complete the evaluation work.

In one embodiment, in order for the bank to assess the financial risk of a new service, the business information may include a risk assessment table, which includes a plurality of risk items (for example: degree of correlation with cash/cash-out degree) For each item (e.g.: always/probably/rarely cash involved or easy to cash out), provide the bank staff to check and score according to the options for the check (e.g.: choose always/probably/rarely involve cash or easy cash out, get 3/ 2/1 points), further, after completing the checking of these questions, a risk score and a risk rating can be obtained, and a financial risk assessment result corresponding to the new service will be generated.

In one embodiment, in order to assess whether a new service complies with relevant laws and regulations, the business information may include a legal compliance checklist, which may include laws and regulations that the new service should comply with (for example : Financial Consumer Protection Act, Personal Data Protection Act), trade association norms (for example: financial institutions handle e-banking business security control operation standards) and other norms that need to be checked (for example: internal regulations of banks), which conform to laws and regulations The check list can also include at least one check result corresponding to the above-mentioned laws and regulations, such as whether it complies with the laws and regulations, and the operation method in the new service that complies with the laws and regulations (for example: in order to comply with the regulations of the Personal Data Protection Law, before collecting customer personal information , provide the terms of use of customer personal information, and obtain the consent of the customer).

In one embodiment, in order to enable personnel to efficiently understand how to fill in at least one form included in the business data, the business data may include a filling instruction, and the filling description includes the at least one form included in the business data. Form filling instructions, such as: filling sequence, macro formula operation process and evaluation result description.

In some embodiments, the storage 120 may include semiconductor or solid-state memory, magnetic tape, removable computer disk, random access memory (random access memory, RAM), read-only memory (read-only memory, ROM) ), hard disk and/or CD.

The processor 140 is respectively coupled to the storage 120 and the communication interface 160, and is used for determining to send some of the service data to the terminal device according to a request provided by the user's terminal device.

In some embodiments, the processor 140 may include a central processing unit (central processing unit, CPU), multiple processors, a distributed processing system, an application specific integrated circuit (application specific integrated circuit, ASIC) and/or suitable computing unit.

The communication interface 160 is communicatively connected to the terminal device of the user for enabling the financial compliance operation management device 100 to receive and transmit data to the terminal device and/or to transmit a business-related data to the terminal device.

In some embodiments, the communication interface 160 may include a wireless communication interface such as BLUETOOTH, WIFI, WIMAX, GPRS or WCDMA; or a wired communication interface such as Ethernet, USB or IEEE-1364.

In some embodiments, the processor 140 is configured to receive an input business data and an input category, wherein the input category represents one of a plurality of financial services, and the input business data includes the regulatory data corresponding to the input category; And store the input business data and the input category in the storage 120 associatively.

For example, the user wants to add a mobile internet banking service risk assessment form corresponding to a mobile internet banking category, wherein the mobile internet banking service risk assessment form includes relevant laws and regulations that must be followed in implementing mobile internet banking services and a number of items to be assessed for compliance. The user transmits the input business data (ie, the mobile internet banking service risk assessment form) and the input category (ie, the mobile internet banking category) to the financial compliance operation management device 100 through the terminal device. After receiving the input business data and the input category, the processor 140 associates and stores the input business data and the input category in the storage 120.

In some embodiments, the processor 140 is configured to receive a business data request, wherein the business data request corresponds to one of the request categories; and transmit the business data according to the request category corresponding to the business data request At least one request service data corresponding to the request category is sent to the terminal device.

For example, in order to add a new service of intelligent voice in mobile Internet banking, the user must fill in at least one compliance document related to the new service, so the terminal device sends the business information request to the financial compliance The operation management device 100, and the service request corresponds to the category of mobile internet banking. After receiving the business data request, the processor 140 transmits at least one requested business data corresponding to the mobile online banking category among the business data stored in the storage 120 (for example: mobile online banking service risk assessment form, mobile network Personal Data Protection Impact Assessment Form for Mobile Internet Banking Services, Legal Compliance Checklist for Mobile Internet Banking Services, and Filling Instructions for the Above-mentioned Three Forms) to the terminal device for use by the user. In one embodiment, the at least one requested business information further includes legal provisions cited when performing related operations of the mobile internet banking category in the past, so as to provide the user with consideration and selection of required legal provisions.

In some embodiments, the processor 140 is configured to receive an updated business data and an updated category of one of the categories, wherein the updated business data includes the legal data corresponding to the updated category; and based on the updated business data, update the At least one business data to be updated among the business data, wherein the at least one business data to be updated corresponds to the update category.

For example, when the laws and/or regulations (for example: personal data protection law) are revised, the laws and/or regulations that banks must follow when implementing mobile Internet banking services also need to be updated, and the user must amend the business information At least one business information to be updated corresponding to the category of mobile internet banking (for example: mobile internet banking service compliance checklist). Therefore, the user sends the updated business information (for example: the updated mobile Internet banking service compliance checklist) and the updated category (for example: the mobile online banking category) to the terminal device through the terminal device . After receiving the updated service data and the updated category, the processor 140 replaces the service data to be updated stored in the memory 120 with the updated service data.

In some embodiments, the processor 140 is configured to receive a request to delete service data, wherein the request to delete service data corresponds to one of the categories of deletion; and according to the deletion category corresponding to the request to delete service data, from the Deleting at least one service data corresponding to the category to be deleted among the business data in the storage.

For example, the user wants to delete at least one of the business data to be deleted (for example: instructions for filling out the mobile Internet banking service risk assessment form), so the user sends the request to delete the business data with the terminal device, wherein The request for deleting business data corresponds to the category of the business data to be deleted (for example: the category of the mobile internet bank). After the processor 140 receives the request to delete the business data, it deletes the at least one business data to be deleted from the storage 120 (for example: instructions for filling out the risk assessment form of mobile Internet banking services).

Please refer further to FIG. 2 , which is a schematic diagram of a financial compliance operation management system 10 according to a second embodiment of the present disclosure. The financial compliance work management system 10 includes a financial compliance work management device 100 and a terminal device 200 . The terminal device 200 includes a user interface 220 .

In some embodiments, the user interface 220 is used to provide a service-related data received by the terminal device 200 . For example, the user interface 220 is a display screen. When the terminal device 200 receives the business-related data, the user interface 220 displays forms, spreadsheets, charts, documents and/or other files included in the business-related data.

In some implementations, depending on the scale and requirements of the financial compliance operation management device 100 in actual operation, the financial compliance operation management device 100 can communicate with a plurality of terminal devices at the same time, and perform communication with each of these terminal devices. It corresponds to the same operation of the terminal device 200 .

The financial compliance operation management device 100 includes a storage (for example: the storage 120 shown in FIG. 1 ), a communication interface (for example: the communication interface 160 shown in FIG. 1 ), and a processor (for example: processor 140 shown in FIG. 1). In one embodiment, the financial compliance operation management device 100 of the financial compliance operation management system 10 is the same as the financial compliance operation management device 100 shown in FIG. 1 .

In some embodiments, the processor of the financial compliance operation management device 100 is configured to receive a business data request, wherein the business data request corresponds to one of the request categories; and according to the request corresponding to the business data request Category, sending at least one request service data corresponding to the request category among the service data to the terminal device 200 .

In some embodiments, the processor of the financial compliance operation management device 100 is used to receive an input business data and an input category, wherein the input category represents one of a plurality of financial businesses, and the input business data includes the corresponding inputting the legal data of the category; and storing the input business data and the input category in association with the storage.

In some embodiments, the processor of the financial compliance operation management device 100 is configured to receive an updated business data and an updated category of one of the categories, wherein the updated business data includes the legal data corresponding to the updated category; and based on The update business data is to update at least one business data to be updated among the business data, wherein the at least one business data to be updated corresponds to the update category.

In some embodiments, the processor of the financial compliance operation management device 100 is configured to receive a request to delete business data, wherein the request to delete business data corresponds to one of the categories; For the deletion category, at least one service data to be deleted corresponding to the deletion category among the business data is deleted from the storage.

Although several embodiments are described above as an example, the financial compliance operation management device and system proposed in this disclosure can also be realized by other systems, hardware, storage media or combinations thereof. Therefore, the scope of protection of the present disclosure should not be limited to the specific implementation described in the embodiments of the present disclosure, as defined by the scope of the appended patent application.

It will be apparent to those skilled in the art to which the present disclosure pertains that various modifications and changes can be made in the structures of the present disclosure without departing from the scope or spirit of the present disclosure. In view of the foregoing, the scope of protection of this disclosure also covers the modifications and changes made within the scope of the appended patent application.

100: Financial compliance operation management device 120: storage 140: Processor 160: communication interface 10: Financial compliance operation management system 200: terminal device 220: user interface

In order to make the above and other purposes, features, advantages and embodiments of the present disclosure more comprehensible, the accompanying drawings are described as follows: Figure 1 is a schematic diagram of a financial compliance operation management device according to the first embodiment of the present disclosure; and FIG. 2 is a schematic diagram of a financial compliance operation management system according to a second embodiment of the present disclosure.

100: Financial compliance operation management device

120: storage

140: Processor

160: communication interface

Claims (10)

A financial compliance operation management device, comprising: a storage for storing a plurality of business data, wherein: each of the business data corresponds to a category, wherein the categories represent one of the plurality of financial businesses; and the Each of these business data includes a legal data corresponding to the category; a communication interface, which is connected to a terminal device for communication, and is used to transmit a business-related data to the terminal device; and a processor, which is coupled to the storage and the The communication interface is used to perform the following operations: receive a business data request, wherein the business data request corresponds to one of the request categories; and according to the request category corresponding to the business data request, transmit the business data corresponding to At least one request service data of the request category should be sent to the terminal device. The financial compliance operation management device as described in Claim 1, wherein the processor further performs the following operations: receiving an input business data and an input category, wherein the input category represents one of a plurality of financial businesses, and the input The business data includes the legal data corresponding to the input category; and the input business data and the input category are associated and stored in the storage. The financial compliance operation management device as described in claim 1, wherein the processor further performs the following operations: receiving an updated business data and an updated category of one of the categories, wherein the updated business data includes the corresponding updated category Regulatory data; and based on the updated business data, updating at least one business data to be updated among the business data, wherein the at least one business data to be updated corresponds to the update category. The financial compliance operation management device as described in claim 1, wherein the processor further performs the following operations: receiving a request to delete business data, wherein the request to delete business data corresponds to one of the categories of deletion categories; and according to the deletion For the deletion category corresponding to the service data request, at least one service data to be deleted corresponding to the deletion category among the business data is deleted from the storage. The financial compliance operation management device as described in claim 1, wherein the business data include at least one of a legal compliance assessment data, a compliance operation data, and a legal interpretation data corresponding to the categories, or combination. The financial compliance operation management device as described in claim 1, The categories include at least one of a mobile network banking category, an online banking category, an electronic payment category, an automated teller machine category, and a network automated teller machine category, or a combination thereof. A financial compliance operation management system, comprising: a terminal device including a user interface, wherein the user interface is used to provide a user with business-related data received by the terminal device; and a financial compliance operation management device , including: a storage device for storing a plurality of business data, wherein: each of the business data corresponds to a category, wherein the categories represent one of the plurality of financial businesses; and each of the business data includes the A legal data corresponding to the category; a communication interface, communicating with the terminal device, for transmitting the business-related data to the terminal device; and a processor, coupled with the storage and the communication interface, for executing the following Operation: receiving a business data request, wherein the business data request corresponds to a request category; and according to the request category corresponding to the business data request, sending at least one requested business data corresponding to the request category among the business data to the terminal device. The financial compliance operation management system as described in claim 7, wherein the processor of the financial compliance operation management device further performs the following operations: receiving an input business data and an input category, wherein the input category represents a plurality of financial one of the businesses, and the input business data includes the legal data corresponding to the input category; and storing the input business data and the input category in the storage in association. The financial compliance operation management system as described in Claim 7, wherein the processor of the financial compliance operation management device further performs the following operations: receive an updated business data and one of the types of updated categories, wherein the updated business The data includes the legal data corresponding to the updated category; and based on the updated business data, at least one business data to be updated among the business data is updated, wherein the at least one business data to be updated corresponds to the updated category. The financial compliance operation management system as described in claim 7, wherein the processor of the financial compliance operation management device further performs the following operations: receiving a request for deleting business data, wherein the request for deleting business data corresponds to one of the categories a delete category; and According to the deletion category corresponding to the deletion service data request, at least one service data to be deleted corresponding to the deletion category among the business data is deleted from the storage.

Images