Information security compliance platform

A computer-implemented system to monitor and determine vendor compliance with at least some aspects of information and security criteria, the system comprising:

• at least one computing device configured by executing code to access information and security criteria respectively associated with a vendor that provides a good and/or service, wherein at least some aspects of the information and security criteria are provided by an organization considering the vendor, and further wherein the information and security criteria include at least one of cybersecurity criteria, regulatory criteria, intellectual property criteria, data management criteria, and policy criteria;
• the at least one computing device further configured to access a plurality of remotely located computing devices to obtain information associated with the vendor's performance in connection with the at least some of the aspects of the information and security criteria;
• the at least one computing device further configured to automatically evaluate the vendor's compliance with the at least some of the aspects of the information and security criteria, wherein the evaluating includes comparing a predetermined standard or threshold of at least one of the aspects of the information and security criteria and at least some of the information obtained from the plurality of remotely located computing devices;
• the at least one computing device further configured to automatically determine, as a function of the evaluating, that the vendor has not complied with a first subset of the aspects of the information and security criteria, wherein the first subset includes at least one of the aspects of the information and security criteria;
• the at least one computing device further configured to automatically determine, as a function of the evaluating, that the vendor has complied with a second subset of the aspects of the information and security criteria, wherein the second subset includes at least one other of the aspects of the information and security criteria;
• the at least one computing device further configured to determine, based at least on an evaluation of the first subset and the second subset, whether the vendor is in compliance or is out of compliance with the information and security criteria;
• and
• the at least one computing device further configured to automatically transmit, to a remotely located computing device, a report identifying that the vendor is in compliance or out of compliance with the information and security criteria.