Third Party Security Control Sustenance Model

Aspects of the disclosure relate to training a machine learning model to continuously sustain security assessment protocols on vendor computing devices. In some embodiments, a machine learning engine may analyze vendor compliance data from previous security assessments, compliance requirements for security gaps that are commonly reported during security assessments, and enterprise security requirements. A security assessment platform may generate and transmit, to a vendor computing device, a plurality of security assessment surveys and instructions for completing a security assessment survey. The machine learning engine may analyze the responses provided on the completed security assessment survey. The security assessment platform may transmit either a notification of compliance or a notification of non-compliance to the enterprise organization. The security assessment platform may continuously perform security assessments, depending on the security risk level of the vendor, to ensure the vendor complies with the prescribed security requirements.

BACKGROUND

Aspects of the disclosure relate to hardware and software for training a machine learning engine to continuously sustain security assessment protocols on vendor computing devices. In particular, one or more aspects of the disclosure relate to initializing a machine learning engine to generate security assessment surveys and assess the responses on the security assessment surveys, provided by a vendor computing device, to determine whether the vendor computing device complies with security requirements established by an enterprise organization.

Current security assessment protocols within an enterprise organization may prescribe a point-in-time security assessment that is performed once per year or once every two years. During each point-in-time security assessment, vendors who provide services to the enterprise organization may be identified. Each vendor's behavior may be analyzed using enterprise security requirements that are generated by the enterprise organization. The enterprise security requirements generated by the enterprise organization may be a series of security-related queries that are designed to assess whether a vendor's behavior complies with the overall security mission of the enterprise organization.

An enterprise organization may partner with a plurality of vendors. Each vendor that partners with the enterprise organization may gain access to sensitive information within the enterprise organization. As such, it becomes increasingly important to monitor vendor behavior to ensure each vendor complies with the security requirements generated by the enterprise organization. However, point-in-time security assessments are not sufficient for monitoring vendor behavior as point-in-time assessments do not provide a method for real-time security assessment.

SUMMARY

Aspects of the disclosure provide effective, efficient, and convenient technical solutions that address and overcome the technical problems associated with ensuring vendor behavior complies with the enterprise security requirements established by the enterprise organization.

In accordance with one or more embodiments, a computing platform comprising at least one processor, a communication interface communicatively coupled to the at least one processor, and memory storing computer-readable instructions that, when executed by the at least one processor, may cause the computing platform to receive, via a connection established with an enterprise compliance administrator computing device, enterprise security requirements transmitted from the enterprise compliance administrator computing device. The computing platform may generate, based on machine learning analysis, a plurality of security assessment surveys. The computing platform may generate a plurality of answer templates corresponding to each security assessment survey of the plurality of the security assessment surveys. In some examples, the answer templates may include instructions, to be executed by a vendor computing device, for completing the security assessment survey. The computing platform may transmit, via a connection established with the vendor computing device, the plurality of the security assessment surveys and the plurality of the answer templates to the vendor computing device. The computing platform may receive, from the vendor computing device, a completed security assessment survey including security assessment response data. The computing platform may analyze, based on the machine learning analysis, the completed security assessment survey including the security assessment response data. The computing platform may generate a notification, the notification including one of either compliance with the enterprise security requirements based on determining that the security assessment response data provided on the completed security assessment survey satisfies the enterprise security requirements or noncompliance with the enterprise security requirements based on determining that the security assessment response data provided on the completed security assessment survey does not satisfy the enterprise security requirements. The computing platform may transmit, to the enterprise compliance administrator computing device, the generated notification.

In accordance with one or more embodiments, a method may comprise, at a computing platform comprising at least one processor, memory, and a communication interface, receiving, via a connection established with an enterprise compliance administrator computing device, enterprise security requirements transmitted from the enterprise compliance administrator computing device. The method may comprise generating, based on machine learning analysis, a plurality of security assessment surveys. The method may comprise generating a plurality of answer templates corresponding to each security assessment survey of the plurality of the security assessment surveys, and including instructions, to be executed by a vendor computing device, for completing the security assessment survey. The method may comprise transmitting, via a connection established with the vendor computing device, the plurality of the security assessment surveys and the plurality of the answer templates to the vendor computing device. The method may comprise receiving, from the vendor computing device, a completed security assessment survey including security assessment response data. The method may comprise analyzing, based on the machine learning analysis, the completed security assessment survey including the security assessment response data. The method may comprise generating a notification, the notification including one of either compliance with the enterprise security requirements based on determining that the security assessment response data provided on the completed security assessment survey satisfies the enterprise security requirements or noncompliance with the enterprise security requirements based on determining that the security assessment response data provided on the completed security assessment survey does not satisfy the enterprise security requirements. The method may comprise transmitting, to the enterprise compliance administrator computing device, the generated notification.

In accordance with one or more embodiments, one or more non-transitory computer-readable media may store instructions that, when executed by a computing platform comprising at least one processor, memory, and a communication interface, cause the computing platform to receive, via a connection established with an enterprise compliance administrator computing device, enterprise security requirements transmitted from the enterprise compliance administrator computing device. The instructions, when executed, may cause the computing platform to generate, based on machine learning analysis, a plurality of security assessment surveys. The instructions, when executed, may cause the computing platform to generate a plurality of answer templates corresponding to each security assessment survey of the plurality of the security assessment surveys, and including instructions, to be executed by a vendor computing device, for completing the security assessment survey. The instructions, when executed, may cause the computing platform to transmit, via a connection established with the vendor computing device, the plurality of the security assessment surveys and the plurality of the answer templates to the vendor computing device. The instructions, when executed, may cause the computing platform to receive, from the vendor computing device, a completed security assessment survey including security assessment response data. The instructions, when executed, may cause the computing platform to analyze, based on the machine learning analysis, the completed security assessment survey including the security assessment response data. The instructions, when executed, may cause the computing platform to generate a notification, the notification including one of either compliance with the enterprise security requirements based on determining that the security assessment response data provided on the completed security assessment survey satisfies the enterprise security requirements or noncompliance with the enterprise security requirements based on determining that the security assessment response data provided on the completed security assessment survey does not satisfy the enterprise security requirements. The instructions, when executed, may cause the computing platform to transmit, to the enterprise compliance administrator computing device, the generated notification.

The features described herein significantly improve the current method of using point-in-time assessments to perform security assessments on vendor computing devices. In particular, the features described herein may provide the following benefits: 1) assurance that the identified security gaps are remedied and sustained until the next security assessment; 2) identification of repeated security gaps; 3) real-time monitoring of vendor behavior; 4) an improved relationship between the vendor and the enterprise organization; 5) allow an enterprise organization to review a vendor's security assessment history prior to awarding additional contracts to that vendor; 6) allow an enterprise organization to strategize the roll out of new technology using each vendor's security assessment history; and/or7) improved security of the enterprise organization.

DETAILED DESCRIPTION

As discussed above, conventional point-in-time security assessments might not provide a sufficient method of monitoring vendor behavior as point-in-time security assessments are performed once per year or once every two years. Accordingly, aspects described herein are directed to real-time monitoring of vendor computing devices. For instance, a machine learning engine may analyze vendor behavior in previous security assessments, compliance requirements for security gaps that are commonly reported during security assessments, and enterprise security requirements to determine the security requirements that may be evaluated during the next security assessment. Based on the analysis by the machine learning engine, a security assessment platform may generate a plurality of security assessment surveys containing the security requirements which may be used to evaluate vendor behavior.

The security assessment platform may distribute the plurality of security assessment surveys to one or more vendor computing devices and provide instructions to the one or more vendor computing devices for completing the security assessment survey. Upon receipt of the completed security assessment survey, including security assessment response data from the one or more vendor computing devices, the security assessment platform may analyze the response data based on further analysis by the machine learning engine. The security assessment platform may then transmit a notification of compliance or non-compliance to an enterprise organization computing device to inform the enterprise organization of whether the vendor satisfied the security requirements that were evaluated during the security assessment. The security assessment platform may transmit a notification of non-compliance to the one or more vendor computing devices along with guidelines that a vendor computing device may execute to comply with the security requirements. When a notification of non-compliance is transmitted, the security assessment platform may determine a time frame within which to perform a subsequent security assessment on the non-compliant vendor.

FIG.1Adepicts an illustrative computing environment for training a machine learning engine to continuously sustain security assessment protocols on vendor computing devices in accordance with one or more example embodiments. Referring toFIG.1A, computing environment100may include one or more computer systems and networks. For example, computing environment100may include security assessment platform110, enterprise compliance administrator computing device120, vendor computing device130, server140, and network150.

As discussed in greater detail below in connection withFIG.1B, security assessment platform110may include one or more processor(s)111, memory(s)112, communication interface(s)113, and display device(s)114. Memory112may include machine learning engine112a, security assessment database112b, and security assessment evaluation module112c. Memory112may be configured to perform one or more of the functions described herein.

Enterprise compliance administrator computing device120may include one or more computing devices and/or other computer components (e.g., processors, memories, communication interfaces, di splay devices). Enterprise compliance administrator computing device120may be a mobile computing device (e.g., smartphone, tablet, laptop computer, or the like). Enterprise compliance administrator computing device120may be linked to and/or used by a user (who may, e.g., be an employee or other individual authorized to access enterprise resources). Enterprise compliance administrator computing device120may include one or more processor(s), memory(s), communication interface(s), and display device(s). A data bus may interconnect the processor, the memory, the communication interface, and the display device. The communication interface may be a network interface configured to support communication between enterprise compliance administrator computing device120and network150. The memory may include one or more program modules having instructions that, when executed by the processor, may cause enterprise compliance administrator computing device120to perform one or more functions described herein and/or one or more databases to store and/or otherwise maintain information which may be used by such program modules and/or the processor. In some instances, the one or more program modules and/or databases may be stored and/or maintained in different memory units of enterprise compliance administrator computing device120.

Vendor computing device130may include one or more computing devices and/or other computer components (e.g., processors, memories, communication interfaces, display devices). Vendor computing device130may be a mobile computing device (e.g., smartphone, tablet, laptop computer, or the like). Vendor computing device130may be linked to and/or used by a user (who may, e.g., be an employee or other individual authorized to access vendor resources and enterprise resources). Vendor computing device130may include one or more processor(s), memory(s), communication interface(s), and display device(s). A data bus may interconnect the processor, the memory, the communication interface, and the display device. The communication interface may be a network interface configured to support communication between vendor computing device130and network150. The memory may include one or more program modules having instructions that, when executed by the processor, may cause vendor computing device130to perform one or more functions described herein and/or one or more databases to store and/or otherwise maintain information which may be used by such program modules and/or the processor. In some instances, the one or more program modules and/or databases may be stored and/or maintained in different memory units of vendor computing device130.

In some arrangements, enterprise compliance administrator computing device120may be owned and/or operated by an enterprise organization. In addition, vendor computing device130may be owned and/or operated by an entity different from the enterprise organization, such as vendors who supply a variety of services to the enterprise organization.

Computing environment100also may include one or more networks, which may interconnect one or more of security assessment platform110, enterprise compliance administrator computing device120, vendor computing device130, and server140. For example, computing environment100may include network150(which may, e.g., connect security assessment platform110, enterprise compliance administrator computing device120, vendor computing device130, and server140).

In one or more arrangements, security assessment platform110, enterprise compliance administrator computing device120, and vendor computing device130may be any type of computing devices capable of receiving a user interface, receiving input via the user interface, and communicating the received input to one or more other computing devices. For example, security assessment platform110, enterprise compliance administrator computing device120, and vendor computing device130, and/or the other systems included in computing environment100may, in some instances, include one or more processors, memories, communication interfaces, display devices, storage devices, and/or other components. As noted above, and as illustrated in greater detail below, any and/or all of security assessment platform110, enterprise compliance administrator computing device120, and vendor computing device130may, in some instances, be special-purpose computing devices configured to perform specific functions.

Referring toFIG.1B, security assessment platform110may include one or more processor(s)111and memory(s)112. A data bus may interconnect processor111and memory112. Memory112may include one or more program modules having instructions that, when executed by processor111, may cause security assessment platform110to perform one or more functions described herein and/or may cause one or more databases to store and/or otherwise maintain information which may be used by such program modules and/or processor111. In some instances, the one or more program modules and/or databases may be stored and/or maintained in different memory units of security assessment platform110and/or by different computing devices that may form and/or otherwise make up security assessment platform110. For example, memory112may have, store, and/or include machine learning engine112a, security assessment database112b, and security assessment evaluation module112c. Machine learning engine112amay be trained to continuously sustain security assessment protocols on vendor computing devices, as discussed in greater detail below. Security assessment database112bmay store the security assessment data that is transmitted to and received by security assessment platform110. Security assessment evaluation module112cmay be trained to continuously sustain security assessment protocols on vendor computing devices, as discussed in greater detail below.

FIGS.2A-2Hdepict an illustrative event sequence for training and using a machine learning engine to continuously sustain security assessment protocols on vendor computing devices in accordance with one or more example embodiments. Referring toFIG.2A, at step201, enterprise compliance administrator computing device120may generate enterprise security requirements. Enterprise security requirements may be enterprise-specific protocols for ensuring that the sensitive enterprise data is protected from unauthorized access by unauthorized personnel. To generate the enterprise security requirements, enterprise compliance administrator computing device120may consider best practices (e.g., established security practices) for protecting the sensitive enterprise data. Enterprise compliance administrator computing device120may consider the system requirements to execute the best practices for protecting the sensitive enterprise data. In particular, enterprise compliance administrator computing device120may consider the system requirements that vendor computing device130may need to satisfy to ensure that vendor computing device130safely interacts with the sensitive enterprise data.

For example, in some embodiments, enterprise compliance administrator computing device120may determine that a particular malware program is required to protect the sensitive enterprise data from unauthorized access. As such, one of the enterprise security requirements that may be generated by enterprise compliance administrator computing device120may require vendor computing device130to ensure the particular malware program is running on vendor computing device130and to ensure the particular malware program is updated as needed, on a predetermined schedule, within a predefined time of updates being available, or the like. Enterprise compliance administrator computing device120may explore additional system requirements for vendor computing device130and compile all system requirements to generate a list of enterprise security requirements.

At step202, security assessment platform110may establish a network connection with enterprise compliance administrator computing device120. The connection between security assessment platform110and enterprise compliance administrator computing device120may be established across network150. As discussed in subsequent steps, security assessment platform110may transmit security assessment data to and from enterprise compliance administrator computing device120. As such, the network connection between security assessment platform110and enterprise compliance administrator computing device120may facilitate the data transmission between security assessment platform110and enterprise compliance administrator computing device120.

At step203, enterprise compliance administrator computing device120may establish a connection with server140. The connection between enterprise compliance administrator computing device120and server140may be established across network150. Server140may store security assessment data that is transmitted to and from enterprise compliance administrator computing device120. The security assessment data that is transmitted to and from enterprise compliance administrator computing device120may be used in future iterations of training a machine learning model to continuously sustain security assessment protocols on vendor computing devices, described herein. As such, server140may store the transmitted security data for future analyses.

At step204, enterprise compliance administrator computing device120may transmit the generated enterprise security requirements to security assessment platform110and server140. Security assessment platform110may use the transmitted enterprise security requirements to train a machine learning model to continuously sustain security assessment protocols on vendor computing device130, as discussed herein. Server140may use the transmitted enterprise security requirements in future iterations of training and/or using a machine learning model to continuously sustain security assessment protocols on vendor computing devices, described herein.

Referring toFIG.2B, at step205, server140may store the enterprise security requirements transmitted from enterprise compliance administrator computing device120in step204. At step206, security assessment platform110may store the enterprise security requirements transmitted from enterprise compliance administrator computing device120in step204.

At step207, security assessment platform110may establish a connection with server140. The connection between security assessment platform110and server140may be established across network150. As discussed in subsequent steps, security assessment platform110may transmit security assessment data to and from server140. As such, the network connection between security assessment platform110and server140may facilitate the data transmission between security assessment platform110and server140.

At step208, server140may transmit vendor compliance data from previous security assessments to security assessment platform110. Security assessment platform110may store the transmitted vendor compliance data from previous security assessments within security assessment database112b. Vendor compliance data from previous security assessments may include the enterprise security requirements that were used during previous security assessments. Vendor compliance data from previous security assessments may include the security assessment response data provided by vendor computing device130on the security assessment surveys that were used during previous security assessments. Vendor compliance data from previous security assessments may include an indication of whether vendor computing device130satisfied the security requirements that were used during previous security assessments. If vendor computing device130satisfied the security requirements, then the vendor compliance data from previous security assessments may state that the system settings of vendor computing device130complied with the system requirements that were dictated by the enterprise organization.

Additionally or alternatively, if vendor computing device130did not satisfy the security requirements that were used during previous security assessments, then the vendor compliance data from previous security assessments may indicate compliance requirements. The compliance requirements may provide a series of steps that vendor computing device130may execute in order to meet the system requirements set in place by the enterprise organization and to satisfy the security requirements.

For example, one of the security requirements used during previous security assessments may have required that vendor computing device130use multi-factor authentication to enable or permit access to enterprise data. The vendor compliance data from previous security assessments may indicate that vendor computing device130did not use multi-factor authentication prior to enabling or permitting access to enterprise data. As such, vendor compliance data from previous security assessments may indicate that vendor computing device130did not satisfy the enterprise security requirements. As a result, vendor compliance data from previous security assessments may provide a series of steps that vendor computing device130may follow in order to establish multi-factor authentication. If security assessments are performed after determining that vendor computing device130failed to use multi-factor authentication, then the vendor compliance data of the subsequent security assessments may indicate whether vendor computing device130instituted multi-factor authentication during subsequent security assessments. As such, the vendor compliance data from previous security assessments may provide a complete history of the behavior of vendor computing device130.

Referring toFIG.2C, at step209, server140may transmit compliance requirements for commonly reported security gaps during security assessments to security assessment platform110. Security assessment platform110may store the transmitted compliance requirements for commonly reported security gaps during security assessments within security assessment database112b. In addition to using enterprise security requirements to perform security assessments on vendor computing device130, security assessment platform110may also consult the security gaps that are commonly reported during security assessments. A security gap may indicate an instance where vendor behavior, across a plurality of vendors, might not have complied with industry security standards. Since the non-compliant behavior may have been common to a plurality of vendors, the non-compliant behavior may have been marked as a security gap that is commonly reported during security assessments. In response to indicating non-compliant behavior that may be common to a plurality of vendors, the particular industry may generate compliance requirements to remedy the non-compliant vendor behavior. Security assessment platform110may use the industry-generated compliance requirements to ensure that vendor computing device130not only satisfies the enterprise security requirements, but that vendor computing device130also satisfies industry-generated compliance requirements.

At step210, server140may transmit enterprise security requirements to security assessment platform110. Security assessment platform110may store the enterprise security requirements within security assessment database112b. As discussed in connection with step201, enterprise compliance administrator computing device120may generate enterprise security requirements. Enterprise security requirements may be enterprise-specific protocols for ensuring that sensitive enterprise data is protected from unauthorized access by unauthorized personnel. To generate the enterprise security requirements, enterprise compliance administrator computing device120may first consider best practices for protecting the sensitive enterprise data. Enterprise compliance administrator computing device120may consider the system requirements that may be necessary to execute the best practices for protecting the sensitive enterprise data. In particular, enterprise compliance administrator computing device120may consider the system requirements that vendor computing device130may need to satisfy to ensure that vendor computing device130safely interacts with the sensitive enterprise data.

At step211, a machine learning model executed by machine learning engine112amay analyze the vendor compliance data from previous security assessments. As discussed in step208, vendor compliance data from previous security assessments may include the security requirements that were used during previous security assessments. Vendor compliance data from previous security assessments may include the security assessment response data provided by vendor computing device130on the security assessment surveys that were used during previous security assessments. Vendor compliance data from previous security assessments may include an indication of whether vendor computing device130satisfied the security requirements that were used during previous security assessments. If vendor computing device130satisfied the security requirements, then the vendor compliance data from previous security assessments may state that the system settings of vendor computing device130complied with the system requirements that were dictated by the enterprise organization. Alternatively, if vendor computing device130did not satisfy the security requirements that were used during previous security assessments, then the vendor compliance data from previous security assessments may indicate compliance requirements. The compliance requirements may provide guidelines that vendor computing device130may execute in order to meet the system requirements set in place by the enterprise organization and to satisfy the enterprise security requirements.

Machine learning engine112amay analyze the vendor compliance data from previous security assessments to determine the security requirements that should be evaluated during the next security assessment. For example, if the vendor compliance data from previous security assessments indicates that vendor computing device130failed to satisfy a particular security requirement, security assessment platform110may flag that particular security requirement for evaluation during the next security assessment. Additionally or alternatively, if the vendor compliance data from previous security assessments indicates that vendor computing device130no longer needs to comply with a particular security requirement (e.g, based on machine learning analysis), then security assessment platform110may remove that particular security requirement from evaluation during the next security assessment. Machine learning engine112amay repeat this analysis until machine learning engine112ahas reviewed all (or a predetermined amount) of the vendor compliance data from previous security assessments.

At step212, machine learning engine112amay analyze the compliance requirements for security gaps that are commonly reported during security assessments. As discussed in step209, a security gap may indicate an instance where vendor behavior, across a plurality of vendors, might not have complied with industry security standards. Since the non-compliant behavior may have been common to a plurality of vendors, the non-compliant behavior may have been marked as a security gap that is commonly reported during security assessments. In response to indicating non-compliant behavior that may be common to a plurality of vendors, the particular industry may generate compliance requirements to remedy the non-compliant vendor behavior. Security assessment platform110may use the industry-generated compliance requirements to ensure that vendor computing device130not only satisfies the enterprise security requirements, but that vendor computing device130also satisfies industry-generated compliance requirements.

Machine learning engine112amay analyze the compliance requirements for security gaps that are commonly reported during security assessments to determine the security requirements that should be evaluated during the next security assessment. For example, if the compliance requirements for security gaps that are commonly reported during security assessments indicate that vendor computing device130failed to satisfy a particular security requirement, security assessment platform110may flag that particular security requirement for evaluation during the next security assessment. Additionally or alternatively, if the compliance requirements for security gaps that are commonly reported during security assessments indicate that vendor computing device130no longer needs to comply with a particular security requirement, then security assessment platform110may remove that particular security requirement from evaluation during the next security assessment. Machine learning engine112amay repeat this analysis until machine learning engine112ahas reviewed all (or a predetermined amount) of the compliance requirements for security gaps that are commonly reported during security assessments.

Referring toFIG.2D, at step213, machine learning engine112amay analyze enterprise security requirements. As discussed in connection with steps201and210, enterprise compliance administrator computing device120may generate enterprise security requirements. Enterprise security requirements may be enterprise-specific protocols for ensuring that the sensitive enterprise data is protected from unauthorized access by unauthorized personnel. Enterprise security requirements may indicate system requirements that vendor computing device130may need to satisfy to ensure that vendor computing device130safely interacts with the sensitive enterprise data.

Machine learning engine112amay analyze the enterprise security requirements to determine the security requirements that should be evaluated during the next security assessment. For example, the enterprise security requirements may require vendor computing device130to have particular data loss prevention controls in place to ensure sensitive enterprise data cannot be removed from vendor computing device130. Based on the machine learning analysis, security assessment platform110may flag this particular security requirement, and others, as security requirements that will be evaluated during the next security assessment. Additionally or alternatively, the enterprise security requirements may change with each security assessment. As such, machine learning engine112amay analyze the enterprise security requirements to determine whether the enterprise security requirements list security requirements that no longer need to be evaluated. In such instances, security assessment platform110may flag the security requirements that no longer need to be evaluated and may remove those security requirements from subsequent security assessments until the enterprise security requirements indicate that otherwise.

At step214, security assessment platform110may generate, based on analysis by machine learning engine112a, a plurality of security assessment surveys and a plurality of answer templates, wherein each answer template corresponds to a security assessment survey of the plurality of security assessment surveys. Security assessment platform110may generate the plurality of security assessment surveys using the vendor compliance data from previous security assessments from steps208and211, the compliance requirements for security gaps that are commonly reported during security assessments from steps209and212, and the enterprise security requirements from steps210and213.

In particular, security assessment platform110may look to the analysis of the vendor compliance data from previous security assessments, performed by machine learning engine112a. Security assessment platform110may determine whether the vendor compliance data from previous security assessments indicates specific security requirements that vendor computing device130previously failed to satisfy. Security assessment platform110may pull the security requirements that vendor computing device130previously failed to satisfy and may incorporate them into the security requirements that will be evaluated in the next security assessment. Additionally or alternatively, security assessment platform110may determine whether the vendor compliance data from previous security assessments indicates security requirements that should be evaluated during each security assessment. Similarly, security assessment platform110may pull the security requirements that should be evaluated during each security assessment and may incorporate them into the security requirements that will be evaluated in the next security assessment.

Additionally or alternatively, security assessment platform110may look to the analysis of the compliance requirements for security gaps that are commonly reported during security assessments, performed by machine learning engine112a. Security assessment platform110may determine whether there are industry-specific security requirements that should be evaluated during every security assessment. Security assessment platform110may gather the security requirements that should be evaluated during every security assessment and may incorporate them into the security requirements that will be evaluated in the next security assessment survey. Security assessment platform110may use the compliance requirements for security gaps that are commonly reported during security assessments to determine whether there are outdated industry-specific security requirements that no longer need to be evaluated. In such instances, security assessment platform110may remove the outdated industry-specific security requirements from the security requirements that should be evaluated during the next security assessment. Security assessment platform110may use the compliance requirements for security gaps that are commonly reported during security assessments to identity the security gaps that are common to vendors in the industry, and may incorporate the corresponding security requirements into the security requirements that should be evaluated during the next security assessment.

Additionally or alternatively, security assessment platform110may look to the analysis of the enterprise security requirements, performed by machine learning engine112a, to determine the security requirements that should evaluated during the next security assessment. The enterprise security requirements may indicate the enterprise-specific security requirements that are necessary to protect sensitive enterprise data from unauthorized use and unauthorized access. As such, security assessment platform110may incorporate each security requirement listed on the enterprise security requirements into the security requirements that will be evaluated during the next security assessment.

As previously discussed, machine learning engine112amay gather all of the security requirements from the vendor compliance data from previous security assessments, the compliance requirements for security gaps that are commonly reported during security assessments, and the enterprise security requirements. Security assessment platform110may compile all of the security requirements into a security assessment survey. The security assessment survey may contain a series of questions, each question corresponding to a particular security requirement from the vendor compliance data from previous security assessments, the compliance requirements for security gaps that are commonly reported during security assessments, or the enterprise security requirements.

The number of questions included within the security assessment survey may depend on the level of risk of the vendor. Vendors that regularly interact with sensitive enterprise data may be deemed a first level or high risk vendor because such vendors pose a greater security risk to the enterprise organization. Additionally or alternatively, vendors that do not regularly interact with sensitive enterprise data may be deemed a second level or low risk vendor because such vendors do not pose a great security risk to the enterprise organization. High risk or first level vendors may encounter a greater number of questions on the security assessment survey than low risk or second level vendors since high risk vendors pose a more significant security risk to the enterprise organization and must satisfy a greater number of security requirements than a low risk vendor.

The questions pertaining to the security requirements may appear as items in a list. The list of questions pertaining to the security requirements may appear in a column on the security assessment survey. The column next to the security requirements may provide a field wherein vendor computing device130may insert data responsive to each question pertaining to a specific security requirement.

Security assessment platform110may generate a plurality of answer templates, wherein each answer template corresponds to a security assessment survey of the plurality of security assessment surveys. Particular questions pertaining to particular security requirements may require a response with more information than other questions. For example, a question which asks whether vendor computing device130uses multi-factor authentication to enable or to permit access to sensitive enterprise data may require a YES or NO response. Additionally or alternatively, a question which asks vendor computing device130to explain the data loss prevention protocols currently in place may require a more detailed, text based response. As such, the answer template may indicate the level of detail required for each response such that security assessment platform110may thoroughly analyze each response, as discussed in step224. Additionally or alternatively, the answer template may include a sample response such that vendor computing device130may consult the sample response to clear any confusion that may exist around a particular question and the required response.

At step215, security assessment platform110may transmit the plurality of security assessment surveys and the plurality of answer templates to server140. As discussed in step228, server140may update vendor compliance data from previous security assessments after each security assessment is performed. To do so, server140may require the security requirements that were evaluated during previous security assessments as well the security assessment response data provided on the security assessment surveys that were evaluated during previous security assessments. Server140may gather the security requirements that were evaluated during previous security assessments, as well as the security assessment response data provided by vendor computing device130, from the plurality of security assessment surveys that are transmitted to server140from security assessment platform110.

Referring toFIG.2E, at step216, server140may store the plurality of security assessment surveys and the plurality of answer templates that were transmitted from security assessment platform110.

At step217, security assessment platform110may establish a connection with vendor computing device130. The connection between security assessment platform110and vendor computing device130may be established across network150. Security assessment platform110may transmit security assessment data to and from vendor computing device130. As such, the network connection between security assessment platform110and vendor computing device130may facilitate the data transmission between security assessment platform110and vendor computing device130.

At step218, security assessment platform110may initialize machine learning engine112aand security assessment evaluation module112cto receive transmissions from vendor computing device130. Initializing machine learning engine112aand security assessment evaluation module112cto receive transmissions from vendor computing device130may require revisiting the network connection between security assessment platform110and vendor computing device130, established in step217, to determine whether the connection was established properly. The connection was established properly if the network connection between security assessment platform110and vendor computing device130can transmit communication between security assessment platform110and vendor computing device130. Additionally or alternatively, if the network connection between security assessment platform110and vendor computing device130cannot transmit communication between security assessment platform110and vendor computing device130, then the network connection in step217may be re-established until the network connection can support communication between security assessment platform110and vendor computing device130.

Initializing machine learning engine112aand security assessment evaluation module112cto receive transmissions from vendor computing device130may include loading vendor-specific communication requirements that security assessment platform110may need to satisfy prior to communicating with vendor computing device130. Since vendor computing device130is affiliated with the enterprise organization and may have access to sensitive enterprise data, vendor computing device130may be required to follow particular protocols when communicating with devices outside of the enterprise organization. The communication protocol may ensure the safety of sensitive enterprise data and sensitive vendor data.

At step219, security assessment platform110may transmit the plurality of security assessment surveys and the plurality of answer templates to vendor computing device130. The transmission of the plurality of the security assessment surveys and the plurality of the answer templates to vendor computing device130may occur over the network connection established between security assessment platform110and vendor computing device130in step217.

Referring toFIG.2F, at step220, security assessment platform110may transmit instructions for completing a security assessment survey to vendor computing device130. The transmitted instructions may indicate that the plurality of the security assessment surveys that were transmitted to vendor computing device130contain a variety of security assessment surveys. The instructions may contain embedded instructions that may execute on vendor computing device130and lead vendor computing device130to the specific security assessment survey that vendor computing device130should complete. The embedded instructions may lead vendor computing device130to the answer template that corresponds to the security assessment survey intended for vendor computing device130. The instructions may indicate that the answer templates provide sample responses that vendor computing device130may consult when completing the security assessment survey. The instructions may direct vendor computing device130to enter responses to the security assessment survey on the security assessment survey rather than entering responses to the security assessment survey on the accompanying answer template. The instructions may address the procedure that vendor computing device130may undertake to return the security assessment survey to security assessment platform110. For example, the instructions may require vendor computing device130to transmit the completed security assessment survey across the network connection established between security assessment platform110and vendor computing device130in step217.

At step221, vendor computing device130may complete the security assessment survey that was specifically generated for vendor computing device130. To complete the security assessment survey that was specifically generated for vendor computing device130, the embedded instructions may execute on vendor computing device130and may lead vendor computing device130to the security assessment survey that was generated for vendor computing device130. The embedded instructions may execute on vendor computing device130and may lead vendor computing device130to the answer template that corresponds to the security assessment survey that was specifically generated for vendor computing device130.

Vendor computing device130may review the questions within the security assessment survey and provide response data in the fields provided on the security assessment survey. Vendor computing device130may then execute the steps listed in the instructions for returning the completed security assessment survey, containing the security assessment response data, to security assessment platform110. For example, the instructions may require vendor computing device130to transmit the completed security assessment survey to security assessment platform110and server140. The instructions may indicate vendor computing device130transmit the completed security assessment survey to security assessment platform110such that machine learning engine112aand security assessment evaluation module112cmay analyze the security assessment response data provided on the completed security assessment survey. The instructions may indicate vendor computing device130transmit the completed security assessment survey to server140such that server140may use the completed security assessment survey to update the vendor compliance data from previous security assessments, which may be stored on server140, as discussed in connection with step228.

At step222, vendor computing device130may transmit the completed security assessment survey to security assessment platform110and server140. As discussed in connection with step220, the instructions may require vendor computing device130to transmit the completed security assessment survey to security assessment platform110such that machine learning engine112aand security assessment evaluation module112cmay analyze the response data provided in the completed security assessment survey. As discussed in connection with step220and step228, the instructions may include an instruction for vendor computing device130to transmit the completed security assessment survey to server140such that server140may use the completed security assessment survey to update the vendor compliance data from previous security assessments, which may be stored on server140.

At step223, server140may store the completed security assessment survey. Server140may use the completed security assessment survey to update the vendor compliance data from previous security assessments, as discussed in step220and step228.

Referring toFIG.2G, at step224, machine learning engine112amay analyze the security assessment response data provided by vendor computing device130on the completed security assessment survey. To analyze the security assessment response data provided by vendor computing device130on the completed security assessment survey, security assessment evaluation module112cmay load, from security assessment database112b, the vendor compliance data from previous security assessments, the compliance requirements for security gaps that are commonly reported during security assessments, and the enterprise security requirements. Machine learning engine112amay compare the security assessment response data provided on the completed security assessment survey with the security requirements listed in the vendor compliance data from previous security assessments, the compliance requirements for security gaps that are commonly reported during security assessments, and the enterprise security requirements. If the security assessment response data provided on the completed security assessment survey complies with the security requirement, security assessment platform110may mark that particular response as “Compliant.” Additionally or alternatively, if the security assessment response data provided on the completed security assessment survey fails to comply with the security requirement, security assessment platform110may mark that particular response as “Non-Compliant.” Machine learning engine112amay continue the review and analysis process until each response on the completed security assessment survey has been checked against the vendor compliance data from previous security assessments, the compliance requirements for security gaps that are commonly reported during security assessments, and the enterprise security requirements.

At step225a, security assessment platform110may transmit a notification of non-compliance to vendor computing device130and enterprise compliance administrator computing device120, as illustrated inFIGS.5and6. After determining that the response data provided by vendor computing device130on the completed security assessment survey does not comply with the security requirements used during the security assessment, security assessment platform110may generate a notification indicating that vendor computing device130does not comply with the security requirements listed in the vendor compliance data from previous security assessments, the compliance requirements for security gaps that are commonly reported during security assessments, or the enterprise security requirements.

In response to determining that vendor computing device130does not comply with the security requirements used during the security assessment, security assessment platform110may generate guidelines that vendor computing device130may execute to ensure vendor computing device130complies with the security requirements used during the security assessment. Security assessment platform110may transmit the guidelines along with the notification of non-compliance to vendor computing device130. Security assessment platform110may transmit the notification of non-compliance to enterprise compliance administrator computing device120to inform enterprise compliance administrator computing device120that vendor computing device130does not satisfy the security requirements for interacting with sensitive enterprise data. Security assessment platform110may inform enterprise compliance administrator computing device120that guidelines were provided to vendor computing device130to comply with the security requirements used during the security assessment.

In response to transmitting a notification of non-compliance, machine learning engine112amay determine a timeframe for performing the next security assessment on vendor computing device130. The timeframe for performing the next security assessment on vendor computing device130may depend on the risk level of vendor computing device130. For example, if vendor computing device130is a first level or high risk vendor, then machine learning engine112amay perform security assessments on vendor computing device130more frequently than if vendor computing device130were a second level or low risk vendor. Moreover, if machine learning device112adetermines that vendor computing device130failed to satisfy a great number of security requirements, then machine learning engine112amay perform security assessments on vendor computing device130more frequently to monitor whether vendor computing device130satisfies the security requirements used during security assessments.

Additionally or alternatively, at step225b, security assessment platform110may transmit a notification of compliance to enterprise compliance administrator computing device120, as illustrated inFIG.4.FIG.4includes one example user interface400including an example notification of compliance that may be transmitted to the enterprise compliance administrator computing device120.

After determining that the security assessment response data provided by vendor computing device130on the completed security assessment survey complies with the security requirements used during the security assessment, security assessment platform110may generate a notification indicating that vendor computing device130complies with the security requirements listed in the vendor compliance data from previous security assessments, the compliance requirements for security gaps that are commonly reported during security assessments, and the enterprise security requirements. Security assessment platform110may transmit the notification of compliance to enterprise compliance administrator computing device120to inform enterprise compliance administrator computing device120that vendor computing device130satisfies the security requirements for interacting with sensitive enterprise data.

In response to transmitting a notification of compliance, machine learning engine112amay determine a timeframe for performing the next security assessment on vendor computing device130. The timeframe for performing the next security assessment on vendor computing device130may depend on the risk level of vendor computing device130. For example, if vendor computing device130is a second level or low risk vendor, then machine learning engine112amay perform security assessments on vendor computing device130less frequently than if vendor computing device130were a first level or high risk vendor. Moreover, if machine learning device112adetermines that vendor computing device130satisfied all of the security requirements, then machine learning engine112amay perform security assessments on vendor computing device130less frequently.

At step226, server140may store the notification that was transmitted in either step225aor step225b. Server140may add the transmitted notification to the vendor compliance data from previous security assessments, as discussed in step228.

Referring toFIG.2H, at step227, security assessment platform110may update or validate vendor compliance data from previous security assessments, stored in security assessment database112b, using the notification transmitted either step225aor step225b. Security assessment platform110may add the security requirements used during the present security assessment to the vendor compliance data from previous security assessments. Security assessment platform110may add the security assessment response data provided by vendor computing device130on the completed security assessment survey to the vendor compliance data from previous security assessments. The updated vendor compliance data from previous security assessments may be used in future iterations of training and using a machine learning model (e.g., the data may be used to validate the model to continuously improve accuracy) to continuously sustain security assessment protocols on vendor computing devices, as described herein. For example, the updated vendor compliance data from previous security assessments may be used in future iterations to determine the security requirements that should be evaluated in subsequent security assessments.

At step228, server140may update vendor compliance data from previous security assessments using the notification transmitted in either step225aor step225b. Server140may add the security requirements used during the present security assessment to the vendor compliance data from previous security assessments. Server140may add the security assessment response data provided by vendor computing device130on the completed security assessment survey to the vendor compliance data from previous security assessments. The updated vendor compliance data from previous security assessments may be used in future iterations of training and using a machine learning model to continuously sustain security assessment protocols on vendor computing devices, as described herein. For example, the updated vendor compliance data from previous security assessments may be used in future iterations to determine the security requirements that should be evaluated in subsequent security assessments.

FIG.3is a flow chart illustrating one example method of training a machine learning engine to continuously sustain security assessment protocols on vendor computing devices according to one or more aspects described herein. The processes illustrated inFIG.3are merely sample processes and functions. The steps shows may be performed in the order shown, in a different order, more steps may be added, or one or more steps may be omitted, without departing from the invention. In some examples, one or more steps may be performed simultaneously with other steps shown and described.

At step301, security assessment platform110may receive enterprise security requirements generated by enterprise compliance administrator computing device120. Enterprise security requirements may be enterprise-specific protocols for ensuring that sensitive enterprise data is protected from unauthorized access by unauthorized personnel. To generate the enterprise security requirements, enterprise compliance administrator computing device120may consider best practices (e.g., established security practices) for protecting the sensitive enterprise data. Enterprise compliance administrator computing device120may consider the system requirements to execute the best practices for protecting the sensitive enterprise data. In particular, enterprise compliance administrator computing device120may consider the system requirements that vendor computing device130may need to satisfy to ensure that vendor computing device130safely interacts with the sensitive enterprise data.

At step302, security assessment platform110may generate a plurality of security assessment surveys based on analysis performed by machine learning engine112a. Machine learning engine112amay analyze vendor compliance data from previous security assessments, compliance requirements for security gaps that are commonly reported during security assessments, and enterprise security requirements. Security assessment platform110, based on the analysis performed by machine learning engine112a, may flag the security requirements that should be evaluated during subsequent security assessments. Security assessment platform110may compile all of the security requirements that should be evaluated during subsequent security assessments into a plurality of security assessment surveys.

At step303, security assessment platform110may generate a plurality of answer templates, based on machine analysis performed by machine learning engine112a, where each answer template may correspond to a security assessment survey of the plurality of security assessment surveys. Particular questions pertaining to particular security requirements may require a response with more information than other questions. For example, a question which asks whether vendor computing device130uses multi-factor authentication to enable or to permit access to sensitive enterprise data may require a YES or NO response. Additionally or alternatively, a question which asks vendor computing device130to explain the data loss prevention protocols currently in place may require a more detailed, text based response. As such, the answer template may indicate the level of detail required for each response. Additionally or alternatively, the answer template may include a sample response such that vendor computing device130may consult the sample response to clear any confusion that may exist around a particular question and the required response.

At step304, security assessment platform110may transmit the plurality of security assessment surveys and the plurality of answer templates to vendor computing device130. The transmission of the plurality of security assessment surveys and the plurality of answer templates to vendor computing device130may occur over a network connection established between security assessment platform110and vendor computing device130. Security assessment platform110may transmit, to vendor computing device130, instructions, to be executed on vendor computing device130, for completing the security assessment survey. The instructions may contain embedded instructions that may execute on vendor computing device130and lead vendor computing device130to the specific security assessment survey that vendor computing device130should complete. The embedded instructions may lead vendor computing device130to the answer template that corresponds to the security assessment survey intended for vendor computing device130. The instructions may indicate that the answer templates provide sample responses that vendor computing device130may consult when completing the security assessment survey. The instructions may direct vendor computing device130to enter responses to the security assessment survey on the security assessment survey rather than entering responses to the security assessment survey on the accompanying answer template. The instructions may address the procedure that vendor computing device130may undertake to return the security assessment survey to security assessment platform110. For example, the instructions may require vendor computing device130to transmit the completed security assessment survey across the network connection established between security assessment platform110and vendor computing device130.

At step305, security assessment platform110may receive a completed security assessment survey, from vendor computing device130, including security assessment response data to the questions listed on the security assessment platform. Security assessment platform110may receive the completed security assessment survey from vendor computing device130across the network connection established between security assessment platform110and vendor computing device130.

At step306, security assessment platform110may analyze, based on machine analysis performed by machine learning engine112a, the security response data provided on the completed security assessment survey. Machine learning engine112amay compare the security assessment response data provided on the completed security assessment survey with the security requirements listed in the vendor compliance data from previous security assessments, the compliance requirements for security gaps that are commonly reported during security assessments, and the enterprise security requirements. If the response data provided on the completed security assessment survey complies with the security requirement, security assessment platform110may mark that particular response as “Compliant.” Additionally or alternatively, if the response provided on the completed security assessment survey fails to comply with the security requirement, security assessment platform110may mark that particular response as “Non-Compliant.”

At step307, security assessment platform110may determine whether the security assessment response data provided on the completed security assessment survey, provided by vendor computing device130, satisfies the enterprise security requirements. If the response data provided on the completed security assessment survey complies with the security requirement, security assessment platform110may mark that particular response as “Compliant.” Additionally or alternatively, if the response provided on the completed security assessment survey fails to comply with the security requirement, security assessment platform110may mark that particular response as “Non-Compliant.”

At step308, in response to determining that the security assessment response data satisfies the enterprise security requirements, security assessment platform110may transmit a notification of compliance to enterprise compliance administrator computing device120. The notification of compliance may indicate that vendor computing device130satisfies the enterprise security requirements for interacting with sensitive enterprise data.

Alternatively, at step309, in response to determining that the security assessment response data fails to comply with the security requirements, security assessment platform110may transmit a notification of non-compliance to enterprise compliance administrator computing device120and vendor computing device130. The notification of non-compliance may indicate that vendor computing device130fails to satisfy the enterprise security requirements for interacting with sensitive enterprise data. The notification may include guidelines to be executed by vendor computing device130to assist vendor computing device130with satisfying the security requirements evaluated on the security assessment survey.

FIG.5illustrates one example user interface500including an example notification of non-compliance that may be transmitted to enterprise compliance administrator computing device120. The notification of non-compliance may indicate that vendor computing device130failed to satisfy the enterprise security requirements that were evaluated on the security assessment survey. The notification of non-compliance may allow enterprise compliance administrator computing device120to review the completed security assessment survey submitted by vendor computing device130. The notification of non-compliance may allow enterprise compliance administrator computing device120to review the compliance requirements that vendor computing device130may execute to satisfy the security requirements evaluated on the security assessment survey. The notification of non-compliance may allow enterprise compliance administrator computing device120to contact vendor computing device130.

FIG.6illustrates one example user interface600including an example notification of non-compliance that may be transmitted to vendor computing device130. The notification of non-compliance may indicate that vendor computing device130failed to satisfy the enterprise security requirements that were evaluated on the security assessment survey. The notification of non-compliance may allow vendor computing device130to review the completed security assessment survey. The notification of non-compliance may allow vendor computing device130to review compliance requirements that, when executed by vendor computing device130, may satisfy the security requirements evaluated on the security assessment survey. The notification of non-compliance may allow vendor computing device130to contact enterprise compliance administrator computing device120.

Various aspects described herein may be embodied as a method, an enterprise computing platform, or as one or more non-transitory computer-readable media storing instructions. Accordingly, those aspects may take the form of an entirely hardware embodiment, an entirely software embodiment, an entirely firmware embodiment, or an embodiment combining software, hardware, and firmware aspects in any combination. In addition, various signals representing data or events as described herein may be transferred between a source and a destination in the form of light or electromagnetic waves traveling through signal-conducting media such as metal wires, optical fibers, or wireless transmission media (e.g., air or space).