Patent ID: 8296244
Filing Date: 2012-10-23
Classification: G06Q

Abstract:
1. A computer for processing credit card standards guidance information for a business, the computer comprising: memory having at least one region for storing computer executable program code; and processor for executing the program code stored in the memory, wherein the program code comprises: code for receiving a master question set and a first question set, each set including a plain language, simplified translation of technical questions based on at least one of a plurality of Payment Card Industry Data Security Standard Self Assessment Questionnaires regarding how a user merchant business processes credit card transactions; code for transmitting for display the first question set to the user; code for receiving a first answer set from the user in response to the first question set; code for transmitting for display a first attestation to the user that the business conforms to a first technical standard relating to the first answer set and receiving a first attestation response from the user; code for identifying a merchant type of the user based on the first answer set, wherein the merchant type relates to a card processing methodology of the user and wherein when the user has two or more locations of the same merchant type, the user's answers apply to those two or more locations of the same merchant type; code for transmitting for display to the user a second question set selected from the master question set based on the merchant type, and allowing the user to skip a question in the second question set, whereupon it is represented up to three times in the second question set, after which the question is flagged for inclusion as a corrective action task; code for receiving a second answer set from the user including positive, negative, or non-applicable answers in response to the second question set and simultaneously populating an answer list in a predetermined requirements questionnaire based on the second answer set; code for generating and transmitting for display a corrective action task to the user when an answer within the second answer set indicates non-compliance with a Payment Card Industry Data Security Standard within at least one of the plurality of Self Assessment Questionnaires; code for transmitting for display to the user a third question set regarding processes of the business in the area of the first attestation, wherein the third question set includes questions selected from the master question set and excluding predetermined questions deemed not applicable based on the second answer set; code for receiving a third answer set from the user including only positive and negative answers in response to the third question set and automatically populating the answer list in the predetermined requirements questionnaire based on the third answer set, and allowing the user to skip a question in the third question set, whereupon it is represented up to three times in the third question set, after which the question is flagged for inclusion as a corrective action task; code for generating and transmitting for display a corrective action task to the user when an answer within the third answer set indicates non-compliance with a Payment Card Industry Data Security Standard within at least one of the plurality of Self Assessment Questionnaires; code for generating and transmitting for display to the user a corrective action plan including a hierarchical list of the corrective action tasks based on a Payment Card Industry Security Standards Council document, where the corrective action tasks are generated based on answers within the second or third answer set as applicable that indicate non-compliance with the Payment Card Industry Security Standards Council document, and where the corrective action tasks have been grouped by relevance and de-duplicated; code for transmitting for display a second attestation to the user regarding completion of the corrective action tasks wherein the user is asked to certify each corrective action task is complete; code for receiving and time-stamping second attestation responses from the user addressing each corrective action task and code for automatically updating answers in the second or third answer set as applicable and automatically updating at least one of the plurality of Self Assessment Questionnaires based on the second attestation responses; code for transmitting for display a third attestation to the user including a confirmation of overall compliance and an acknowledgement that the user must maintain continuous Payment Card Industry compliance and receiving and time-stamping a third attestation response and a user identity from the user; code for generating a confirmed Self Assessment Questionnaire from among the plurality of Self Assessment Questionnaires based on the first answer set, the first attestation response, the second answer set, the third answer set, the second attestation responses, and the third attestation response; and code for generating exception reports identifying failures to satisfy the Self Assessment Questionnaires based on the responses for one or more users and transmitting the exception reports to a host associated with the one or more users for use in automated and manual risk management processes.