Back to results
US 2023/0419223 A1Published application
Vendor risk assessment
OwnerLance Muellerinventor
Life of this patent
Estimating the term…
Abstract
Embodiments of the invention provide organizations with an efficient method to evaluate the inherent cybersecurity risk to make informed decisions about partnering, acquiring, or doing business with other organizations.
Claims19
A computer implemented vendor security risk assessment method, comprising:
- a processor creating a digital trust score by:
- receiving a completed vendor questionnaire from a vendor;
- mapping said a vendor questionnaire to one or more disparate security questionnaire data sources;
- collecting evidence to gather supporting documentation from a plurality of disparate, time varying data sources;
- processing questionnaire mapping and evidence collection results;
- receiving results of a vendor interview to close any potential gaps that are already identified;
- generating a draft vendor security risk report including a digital trust score;
- receiving a vendor security risk assessment response to verify a accuracy of the vendor risk report;
- generating a graphical representation of said digital trust score for display on a display device;
- and
- publishing a final vendor security risk assessment report including said graphical representation of said digital trust score.
8 more elements
A computer implemented method for generating a data structure for a digital trust score, comprising:
- a processor applying a classification of inherent risk based on an industry vertical;
- and
- the processor organizing digital trust score components into a plurality of categories, each said category comprising a plurality of items;
- wherein said data structure comprises a matrix of said items arranged by categories, said items arranged in rows, said matrix comprising rules arranged in columns;
- said matrix receiving categorical multidimensional time varying data and applying said rules in near real time to said data to generate said digital trust score;
- and
- said processor generating a graphical representation of said digital trust score for display on a display device.
4 more elements
A digital trust ecosystem, comprising:
- a processor configured for implementing a security risk assessment service, said security risk assessment service:
- determining a digital trust score based on interaction with vendors/suppliers;
- receiving cybersecurity related information directly from a plurality of partner organizations, said partner organizations reporting to said security risk assessment service on behalf of their clients, said cybersecurity related information comprising an input to said security risk assessment service;
- generating said digital trust score and/or a vendor security risk assessment by:
- applying a classification of inherent risk based on an industry vertical;
- organizing a plurality of digital trust score components into a plurality of categories, each said category comprising a plurality of items;
- generating a data structure comprising a matrix of said items arranged by categories, said items arranged in rows, said matrix comprising rules arranged in columns;
- and
- said matrix receiving categorical multidimensional time varying data and applying said rules in near real time to said data to generate said digital trust score for display on a display device.
6 more elements
Dependencies are inferred from the claim text.