Remote security self-assessment framework

A method of computer security self-assessment, comprising:

• receiving a request to access an enterprise application from a personal computing device, wherein the personal computing device is a bring-your-own-device;
• when the personal computing device does not have a security self-assessment native mobile application installed thereon and the personal computing device comprises a mobile phone operating system then:
• sending a request for approval to install the security self-assessment native mobile application on the personal computing device;
• responsive to the request, receiving approval to install the security self-assessment native mobile application;
• and
• response to the approval, sending, by a self-assessment server, the security self-assessment mobile native application to the personal computing device;
• when the personal computing device does not have the security self-assessment native mobile application installed thereon and the personal computing device does not comprise a mobile phone operating system then:
• sending a request for approval to install a security self-assessment browser plug-in on the personal computing device;
• responsive to the request, receiving approval to install the security self-assessment browser plug-in;
• and
• responsive to the approval, sending, by the self-assessment server, the security self-assessment plug-in into a browser stored in the personal computing device;
• when the personal computing device has the security self-assessment native mobile application installed thereon,
• determining whether one or more of a plurality of scan tools stored on the personal computing device and associated with the security self-assessment native mobile application are outdated, wherein the plurality of scan tools comprise a data discovery engine including a primary account number scan tool that detects credit card numbers stored on the personal computing device and a social security number scan tool that detects social security numbers stored on the personal computing device and a vulnerability assessment engine including a registry check tool and a file check tool;
• and
• when the one or more of the plurality of scan tools are determined to be outdated, sending, by the self-assessment server, one or more updated scan tools to the personal computing device to replace the one or more of the plurality of scan tools;
• and
• receiving, by the self-assessment server, results of the personal computing device executing the security self-assessment native mobile application or the security self-assessment plug-in, wherein each of the plurality of scan tools is installed or copied on the personal computing device prior to being invoked, wherein the security self-assessment native mobile application or the security self-assessment plug-in invokes the plurality of scan tools, which execute on the personal computing device, and wherein the self-assessment server assesses a security compliance of the personal computing device with electronic information security regulations or policies based on the results.

A method of computer security self-assessment, comprising:

• receiving a request to access an enterprise application from a computing device, wherein the computing device is a bring-your-own-device or an enterprise computing device;
• when the computing device does not have a security self-assessment native mobile application installed thereon and the computing device comprises a mobile phone operating system then:
• sending a request for approval to install the security self-assessment native mobile application on the computing device;
• responsive to the request, receiving approval to install the security self-assessment native mobile application;
• and
• responsive to the approval, sending, by a self-assessment server, the security self-assessment mobile native application to the computing device;
• when the computing device does not have the security self-assessment native mobile application installed thereon and the computing device does not comprise a mobile phone operating system then:
• sending a request for approval to install a security self-assessment browser plug-in on the computing device;
• responsive to the request, receiving approval to install the security self-assessment browser plug-in;
• and
• responsive to the approval, sending, by the self-assessment server, the security self-assessment plug-in into a browser stored in the computing device;
• when the computing device has the security self-assessment native mobile application installed thereon,
• determining whether one or more of a plurality of scan tools stored on the computing device and associated with the security self-assessment native mobile application are outdated, wherein the plurality of scan tools comprise a data discovery engine including a primary account number scan tool that detects credit card numbers stored on the personal computing device and a social security number scan tool that detects social security numbers stored on the personal computing device and a vulnerability assessment engine including a registry check tool and a file check tool;
• and
• when the one or more of the plurality of scan tools are determined to be outdated, sending, by the self-assessment server, one or more updated scan tools to the computing device to replace the one or more of the plurality of scan tools;
• and
• receiving, by the self-assessment server, results of the computing device executing the security self-assessment native mobile application or the security self-assessment plug-in, wherein each of the plurality of scan tools is installed or copied on the computing device prior to being invoked, wherein the security self-assessment native mobile application or the security self-assessment plug-in invokes the plurality of scan tools, which execute on the personal computing device, and wherein the self-assessment server assesses a security compliance of the computing device with electronic information security regulations or policies based on the results.