Systems and Methods for Programmable Corporate Policies and Management Intervention

An encrypted document-oriented recordset system for performing a search on export controlled items within a corporate asset infrastructure, wherein a programmable export policy comprises a plurality of functions that may change the ways in which the search is performed to identify forwarding locations and sender employee nationalities for a vendor access that is most advantageous to proprietary business strategies, wherein a checksum function verifies the plurality of functions are unaltered based on at least one of version information, effective date and last revised date of the programmable export policy, comprising:

• a processing device having a processor;
• an export review management system deployed on the processing device and operable to execute on the processor, the export review management system operate to:
• in a management system, display a first graphical view of the corporate asset infrastructure including a recovery threshold;
• in response to a split command from a host including an encrypted private key, execute a split function included in the plurality of functions to disassemble the encrypted private key into a plurality of shards having a total quantity at least equals to the recovery threshold;
• in response to an export command from a host, execute an export function included in the plurality of functions to record an aggregated element in a paper-wallet, wherein the aggregated element comprises a group account identifier designated to at least the first and the second of the plurality of shreds, and wherein the aggregated element further comprises a first shard identifier designated to a first of the plurality of shards committed physically to a first of the plurality of shreds, and wherein the aggregated element further comprises a second shard identifier designated to a second of the plurality of shards committed physically to a second of the plurality of shreds;
• in the management system, receive from the first graphical view a first user input comprising an intermediate code, and in response to the first user input, executing an intermediate code function included in the plurality of functions to derive from the intermediate code, transparently to a user, the encrypted private key;
• in the management system, receive from the first graphical view a second user input comprising a passphrase, and in response to the second user input, executing a passphrase function included in the plurality of functions to derive from the passphrase, transparently to a user, the encrypted private key;
• determine, transparently to a vendor, an indexing value for a desired plaintext item of data provided by the vendor, the indexing value being based, at least partially on the desired plaintext item of data, a transformation expression and a redacted technical data list;
• executing a classification function included in the plurality of functions to calculate a numerical representation of a classification for the vendor access, wherein the processor checks a checksum of the programmable export policy to verify that the classification function is unaltered based on version information of the programmable export policy, wherein the processor executes the classification function to calculate the numerical representation based on normalized and weighted scores for all factors associated with the vendor access;
• execute a search operation to obtain initial results, wherein the initial results comprise a plurality of classes-of-export that match a search criteria and a plurality of controlled items associated with the plurality of classes-of-export that match the search criteria, wherein the search criteria includes the numerical representation and a plurality of key variables, the plurality of key variables include at least one of Access Frequency, Archival and Deletion, Control Plan, Government License, Restricted Destinations List, Connectivity, Data Migration, Policy Enforcement, Geographic Locations, and Business Impact;
• execute a jump function included in the plurality of functions to move the plurality of controlled items to a forwarding location that is not a subject of restrictions found on the Restricted Destination List key variable;
• execute a red flag function included in the plurality of functions to obtain final results, wherein the final results comprise a subset of the plurality of controlled items associated with each of the plurality of classes-of-export that match the search criteria, wherein the red flag function comprises functionality to query an attribute for each of the plurality of controlled items to obtain the redacted technical data list wherein each of the plurality of controlled items listed on the redacted technical data list are subject to export restrictions, and discard any of the plurality of controlled items that are in the redacted technical data list to obtain the subset of the plurality of controlled items;
• execute an intervention function included in the plurality of functions to determine a redirection of a sender employee to the final results based on nationality of the sender employee, wherein the nationality is determined to confer advantages to the proprietary business strategies, wherein the intervention function does not include an export team for its management;
• and
• use the indexing value to access a corresponding entry in an indexing structure to obtain a document-oriented recordset entry including encrypted ciphertext corresponding to the desired plaintext item of data.