Patent ID: 11868480
Assignee: VALENTE SHERMAN, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G  H

Claim 0:
1. A system comprising:
a communications interface configured:
to receive security practices information from a first computing system via a network, wherein the security practices information characterizes security measures in place at the first computing system,
to receive computing services interaction information from a second computing system via the network, wherein the computing services interaction information characterizes data transmitted from the second computing system to the first computing system, and
to transmit a risk assessment message to the second computing system, the risk assessment message including an estimate of an information security risk associated with transmitting the data from the second computing system to the first computing system, where the risk assessment is client-specific to the second computing system and depends on the type of information to be transmitted to the first computing system;

memory configured to store security information; and
a processor configured to determine a risk profile for the first computing system based on the security practice information and to determine the estimate of the information security risk based on the risk profile and the computing services interaction information, wherein determining the risk profile comprises estimating a dimensional risk factor for each of a plurality of security dimensions based on the security practice information, the dimensional risk factor reflecting a reported security practice associated with the security dimension, the dimensional risk factor reflecting a level of assurance associated with the reported security practice, wherein determining the estimate of the information security risk comprises determining a weighting value for each of the dimensional risk factors based on the computing services interaction information, the weighting reflecting a relative importance of the dimensional risk factor to the estimate of the information security risk, and wherein determining the risk profile comprises calculating a weighted average of the dimensional risk factors.