Patent ID: 8201256

Claim:
A computer system for determining compliance of a computer network, comprising: a memory storing an operating framework of various predetermined compliance standards with which to measure against the computer network, the various predetermined compliance standards comprising at least a governmental regulatory standard having requirements for protecting confidentiality of health-related information and a payment card information security program having requirements for destruction of data stored on electronic media beyond reconstruction or prevention of data being stored on electronic media; a compliance question database, comprising questions relating to whether the computer network complies with requirements of the various predetermined compliance standards answerable by a user to verify compliance with the various predetermined compliance standards, for selecting the governmental regulatory standard of the various predetermined compliance standards specific to the user; and a processor configured to provide predetermined compliance questions to the user based on the selected governmental regulatory standard of the various predetermined compliance standards, receive the user's answer to the predetermined compliance questions, and store the user's answer to the predetermined compliance questions in a compliance answer database; wherein the processor is further configured to scan the computer network, generate a score indicating the degree to which the computer network complies with the selected governmental regulatory standard of the various predetermined compliance standard based on the scan of the computer network and the user's answer in the compliance answer database, and generate a report including a result as to whether the computer network complies with the requirements of the selected predetermined compliance standard based on the score, and when the generated score identifies non-compliance of the computer network, including information how to solve the non-compliance with the report.