A) "Someone needs to..." is a passive way of saying that you want something. You want or you need something. Own it.
B) I have been doing this on a PoC per-fee basis since the beginning op 2012, but only as an aggregate and only for a few people. It's a pain in the ass to weigh source authority systematically. I was trying to boil it down to a FICO-style 'score' after talking to some former coworkers at Fair Isaac, but it's just as unreliable, so I ended up with a multidimensional risk profile. I didn't want to provide intrusive or unactionable information.
I have done some SNA-based risk analysis in the redacted community years ago and thought it would be an interesting tool. Someone with more experience in the financial risk analysis space may have more luck.
However, the problem with risk analysis is that the people who are good at it can make much more money as part of a larger financial services firm. As a result, the only people who tend to provide that service alone (such as Moody's, S&P, etc.) tend to be the people who can't get the better-paying jobs.
That is, the people who would be interested in providing this for the community are precisely those who are less qualified.
Perhaps it's the people who are most familiar with the system end up becoming some of the worst offenders due to their willingness to cheat and exploit vulnerabilities from within the system.
~DonShrents
