US 10,649,881 B2 · Determining compliance of software applications to compliance standards based on mapped application capabilities

Abstract

The disclosure herein describes determining the compliance of software applications to compliance standards based on capabilities of the software applications. The capabilities of a software application are identified, and the compliance controls of a compliance standard are identified from respective data stores. The capabilities are mapped to the compliance controls based on defined capability map data. Based on at least one capability of the software application being mapped to each compliance control of the compliance standard, a positive compliance indicator is provided, whereby compliance of the software application with the compliance standard is confirmed. The described systems and methods provide efficient means for determining compliance of software applications based on defined capabilities that are abstracted to be comparable to a variety of compliance controls.

Claims20

Dependent claims

A system for determining compliance of software applications to compliance standards comprising:

at least one processor;
and
at least one memory comprising computer program code, the at least one memory and the computer program code configured to, with the at least one processor, cause the at least one processor to:
identify one or more capabilities associated with a software application in a capability data store;
identify one or more compliance controls associated with a compliance standard in a compliance control data store;
receive, via a user interface, a selection of a level of precision for a compliance report, the level of precision including a high precision and a low precision;
map the identified one or more capabilities to the identified one or more compliance controls based on capability map data in the capability data store and the received selection, wherein upon selection of the low precision for the compliance report, control relationship data is used to identify additional possible matches, the additional possible matches being in addition to the matches identified for a high precision compliance report;
and
based on the one or more capabilities being mapped to the one or more compliance controls, provide a positive compliance indicator, whereby compliance of the software application with the compliance standard is confirmed.

6 more elements

A computerized method for determining compliance of software applications to compliance standards, the method comprising:

identifying, by a processor, one or more capabilities associated with a software application in a capability data store;
identifying, by the processor, one or more compliance controls associated with a compliance standard in a compliance control data store;
receiving, via a user interface, a selection of a level of precision for a compliance report, the level of precision including a high precision and a low precision;
mapping, by the processor, the identified one or more capabilities to the identified one or more compliance controls based on capability map data in the capability data store and the received selection, wherein upon selection of the low precision for the compliance report, control relationship data is used to identify additional possible matches, the additional possible matches being in addition to the matches identified for a high precision compliance report;
and
based on the one or more capabilities being mapped to the one or more compliance controls, providing, by the processor, a positive compliance indicator, whereby compliance of the software application with the compliance standard is confirmed.

3 more elements

One or more computer storage media having computer-executable instructions for determining compliance of software applications to compliance standards that, upon execution by a processor, cause the processor to at least:

identify one or more capabilities associated with a software application in a capability data store;
identify one or more compliance controls associated with a compliance standard in a compliance control data store;
receive, via a user interface, a selection of a level of precision for a compliance report, the level of precision including a high precision and a low precision;
map the identified one or more capabilities to the identified one or more compliance controls based on capability map data in the capability data store and the received selection, wherein upon selection of the low precision for the compliance report, control relationship data is used to identify additional possible matches, the additional possible matches being in addition to the matches identified for a high precision compliance report;
and
based on the one or more capabilities being mapped to the one or more compliance controls, provide a positive compliance indicator, whereby compliance of the software application with the compliance standard is confirmed.

3 more elements

Dependencies are inferred from the claim text.

Determining compliance of software applications to compliance standards based on mapped application capabilities

Life of this patent

Determining compliance of software applications to compliance standards based on mapped application capabilities

Life of this patent

Abstract

Claims20