Security policy compliance verification and certification as a service leveraging systems providing access management as a service

A method of auditing compliance of an organization with one or more security policies, the method comprising:

• receiving from a frontend instance of software instantized at a client device, at a backend instance of software instantiated by cooperation of processing resources and memory resources, a request comprising:
• first information identifying an organization;
• and
• second information identifying at least one information security standard;
• in response to the request, querying a first database to determine whether a compliance score exists in respect of the organization and the information security standard;
• in accordance with a first determination that the compliance score exists, generating a response to the request, the response comprising the compliances score;
• or
• in accordance with a second determination that the compliance score does not exist:
• querying a first data store, with the first information, to retrieve a set of third-party software licensed by and deployed by the organization;
• generating a set of structured data representations by querying a second data store with each respective third-party software to, for each respective third-party software, retrieve a respective structured data representation of a respective configuration of the respective third-party software as deployed by the organization as of receiving the request;
• querying a third data store, with the second information, to retrieve a data object comprising attributes corresponding to software configuration requirements imposed by the information security standard;
• for each respective attribute of the data object, determine whether the respective software configuration requirement imposed by the information security standard is satisfied by at least one structured data representation of the set of structured data representations and:
• in response to determining that the respective software configuration requirement is not satisfied by any structured data representation of the set of structured data representations, providing a first output asserting that the organization fails to comply with the information security standard;
• and
• in response to determining that the respective software configuration requirement is satisfied by at least one structured data representation of the set of structured data representations, providing a second output asserting that the organization at least partially complies with the information security standard;
• in response to determining that each software configuration of each respective attribute of the data object is satisfied by at least one structured data representation of the set of structured data representations, providing a third output asserting that the organization fully complies with the information security standard;
• generating the compliance score from at least one of the first output, the second output, or the third output;
• and
• generating the response to the request, the response comprising the compliance score;
• and
• transmitting the response to the frontend instance to cause a graphical user interface of the frontend instance to display the compliance score.

A method of auditing compliance of an organization with one or more security policies, the method comprising:

• receiving from a frontend instance of software instantized at a client device, at a backend instance of software instantiated by cooperation of processing resources and memory resources, a request comprising:
• first information identifying an organization;
• second information identifying a selected information security standard;
• and
• third information comprising a date range;
• querying a database with the first information, the second information, and the third information to retrieve a set of historical compliance scores generated in respect of the organization and the selected information security standard at different times within the date range, each historical compliance score of the set of historical compliances score generated by the backend instance of software by determining which third-party software licensed by the organization through the backend instance and deployed by the organization complied with the selected information security standard;
• generating a response to the request, the response comprising the set of historical compliances scores;
• and
• communicating the response to the frontend instance.