Enterprise risk, security and compliance automation systems and methods

A computing system useful for implementing an enterprise risk and compliance automation engine comprising:

• a processor configured to execute instructions;
• a memory containing instruction that, when executed on the processor, causes the processor to perform operations that;
• obtain an information technology (IT) security standard;
• normalize the IT security policy standard into a machine-readable format;
• templatize the machine-readable format version of the IT security policy standard, wherein each template comprises a collection of controls, wherein each control comprises a statement that describes a condition that a transaction or activity an IT system is required to perform by IT security policy standard, wherein the IT security policy standard comprises a specified complex control;
• configuring the specified complex control by mapping the specified complex control to a plurality of atomic operations or rules of a Global Controls Library (GCL);
• discover a set of configurations of the IT system;
• compare the set of configurations of the IT system with the collection of controls of each template;
• and
• generate a validation report that comprises a report of whether the set of configurations of the IT system satisfies the collection of controls of each template.