Dynamic risk profiling using dimensional risk factors in vendor-client data security

A system comprising:

• an input interface configured to receive security practices information from a vendor computing system and computing services interaction information from a client computing system, wherein the security practices information characterizes security measures in place at the vendor computing system and the computing services interaction information characterizes data for transmission from the client computing system to the vendor computing system;
• a processor configured to determine a risk profile for the vendor computing system by using a processor to estimate a first dimensional risk factor for a first security dimension associated with the security practices information;
• and
• an output interface configured to transmit a risk profile message to the client computing system, wherein the risk profile message is client-specific to the client computing system and depends on information to be transmitted from the client computing system to the vendor computing system,
• wherein a first weight to a first dimensional risk factor corresponding to a first security dimension associated with security practices information is adjusted at the processor based on the change in security practices information when a change in security practices information at the vendor computing system is detected.

A non-transitory computer readable medium comprising:

• computer code for receiving security practices information from a vendor computing system and computing services interaction information from a client computing system, wherein the security practices information characterizes security measures in place at the vendor computing system and the computing services interaction information characterizes data for transmission from the client computing system to the vendor computing system;
• computer code for determining a risk profile for the vendor computing system by using a processor to estimate a first dimensional risk factor for a first security dimension associated with the security practices information;
• computer code for transmitting a risk profile message to the client computing system, wherein the risk profile message is client-specific to the client computing system and depends on information to be transmitted from the client computing system to the vendor computing system;
• and
• computer code for detecting a change in security practices information at the vendor computing system, wherein a first weight to a first dimensional risk factor corresponding to a first security dimension associated with security practices information is adjusted at the processor based on the change in security practices information.