Methods, systems and computing platforms for evaluating and implementing regulatory and compliance standards

A system, comprising:

• a processor executing software instructions defining a compliance navigator for determining compliance with one or more standards associated with cyber-security risk or information security risk;
• a network operably coupled to the processor capable of connecting to a computing device of a user also on the network;
• and
• a memory operably coupled to the processor for storing the compliance navigator software, the compliance navigator software comprising a content management system, at least one assessment module, an access control module, an audit module, and an automated testing module;
• wherein the processor generates a web-based interface allowing the user to interact with the compliance navigator software;
• wherein the user is asked a series of questions by the compliance navigator software;
• wherein the answers to the questions presented are analyzed by the compliance navigator software to determine if the user is following a first compliance standard;
• wherein the compliance navigator software is adapted to cross map answers given for the first compliance standard to a second compliance standard;
• wherein the automated testing module provides for interfacing with an external computing system performing testing and updating one or more answers of an assessment with results obtained from the external computing system;
• wherein the external computing system performing the testing provides for sending over a network data points from a software application associated with the assessment, wherein the software application incorporates software code from an automated build pipeline harness which provides the data points and wherein the data points are associated with one or more of the answers to the plurality of assessment questions to assist in determining if the user is following the first compliance standard and the second compliance standard.

A method of performing an online assessment of compliance with cyber-security risk and information security risk standards, comprising the steps of:

• providing access to a user to a compliance navigator software tool, the compliance navigator software tool comprising a content management system, an assessment module, an access control module, an audit module, and an automated testing module;
• presenting a plurality of assessment questions to the user by executing the assessment module;
• assessing answers to the plurality of assessment questions using the assessment module, the assessment module comprising machine-readable instructions stored on the non-transitory machine-readable storage medium;
• and
• displaying results of the assessment to the user;
• cross mapping answers directed to a first information security assessment to a second information security assessment;
• wherein the automated testing module is configured for accessing results from at least one external computing system and updating one or more answers associated with the questions of the assessment module with the results;
• wherein the automated testing module provides for obtaining data points from software built with an automated pipeline harness library and using the data points in providing answers to one or more of the assessment questions.