Information security compliance platform

A computer-implemented method to monitor and determine vendor compliance with information and security criteria, the method comprising:

• accessing, by at least one computing device, ones of a plurality of information and security criteria respectively associated with each of a plurality of vendors that provide a good and/or service, wherein the information and security criteria include at least one of cybersecurity criteria, regulatory criteria, intellectual property criteria, data management criteria, and policy criteria;
• for each one of the respective vendors:
• identifying, by at least one computing device, aspects of the information and security criteria for the type of the respective vendor;
• and
• accessing, by at least one computing device, at least one remotely located computing device to obtain information associated with the respective vendor's performance in connection with at least one of the aspects;
• automatically providing, by at least one computing device via a graphical user interface, selectable options including vendor information representing each of the plurality of vendors, wherein the vendor information represents at least one change to a respective vendor account and a representation of risk associated with the at least one change;
• automatically providing, by at least one computing device in response to receiving a selection of one of the selectable options, compliance information representing the at least one of the aspects of the information and security criteria;
• automatically evaluating, by at least one computing device, compliance of a vendor respectively associated with the selection with the at least one of the aspects, wherein the evaluating includes comparing a predetermined standard or threshold of the at least one of the aspects and at least some of the information obtained from the at least one remotely located computing device;
• automatically determining, by at least one computing device, as a function of the evaluating that the respective vendor is not compliant with the at least one of the aspects;
• and
• automatically transmitting, by at least one computing device to a remotely located computing device, a report identifying at least the respective vendor is out of compliance and the at least one of the aspects.

A computer-implemented system to monitor and determine vendor compliance with information and security criteria, the system comprising:

• at least one computing device configured by executing code to perform steps, including to:
• automatically evaluate the compliance of each of a plurality of vendors that provide a good and/or service with the information and security criteria, wherein the evaluating includes comparing a predetermined standard or threshold of at least one respective aspect of the information and security criteria and at least some of the information obtained from a plurality of remotely located computing devices;
• automatically provide via a graphical user interface, selectable options including vendor information representing each of the plurality of vendors, wherein the vendor information represents at least one change to a respective vendor account and a representation of risk associated with the at least one change;
• automatically provide, in response to receiving a selection of one of the selectable options, compliance information representing at least one respective aspect of the information and security criteria;
• determine, based at least on an evaluation of the at least one respective aspect, whether the vendor is in compliance or is out of compliance with the information and security criteria;
• and
• automatically transmit, to a remotely located computing device, a report identifying that the vendor is in compliance or out of compliance with the information and security criteria.