IT compliance and request for proposal (RFP) management

A computer-implemented method executing computer-readable instructions by at least one microprocessor, said instructions stored in a non-transitory storage medium coupled to said at least one microprocessor, and said method comprising the steps of:

• (a) in one of an automated and a semi-automated manner, providing a response to a question of a new request for proposal (RFP) document received by an organization, by utilizing a machine learning algorithm for finding matching items to said question, said matching items belonging to one or more elements comprising a corpus of prior RFP documents that said organization or a peer organization has responded to, a corpus of stock policies of said organization, a corpus of externally sourced documents and one or more admin-inputs;
• (b) auto-answering said question of said new RFP based on said matching items;
• (c) monitoring compliance of said organization to a set of controls for identifying gaps in said compliance;
• and
• (d) storing said corpus of prior RFP documents, said stock policies, said admin-inputs and said set of controls in a database and providing them to be related to one or both of a security and a privacy domain.

A multi-tenant software as a service (SaaS) web-application system comprising computer-readable instructions stored in a non-transitory storage medium and at least one microprocessor coupled to said storage medium for executing said computer-readable instructions, said at least one microprocessor configured to:

• (a) in one of an automatic and a semi-automatic manner, provide a response to one or more questions of a new request for proposal (RFP) document received by an organization, by utilizing one or more machine learning algorithms to find matching items to said one or more questions, said matching items belonging to one or more elements comprising a corpus of prior RFP documents that said organization or a peer organization has responded to, a corpus of stock policies of said organization, a corpus of externally sourced documents and one or more admin-inputs;
• (b) auto-answer said one or more questions of said new RFP based on said matching items;
• and
• (c) utilize a monitoring module to monitor compliance of said organization to a set of controls to identify gaps in said compliance;
• wherein said new RFP, said corpus of prior RFP documents, said stock policies, said admin-inputs and said set of controls are related to one or both of a security and a privacy domain, and are stored in a database.