Patent Document ID: 8121892
Application ID: 11144946
Patent Flag: 1

Claim One:
1. A method, comprising: determining, in a computer, an entity type corresponding to an entity; authenticating, in the computer, a first user associated with information technology infrastructure of the entity; authenticating, in the computer, a second user associated with information handling of the entity; selecting, in the computer, information technology infrastructure questions associated with the entity type from a pool of questions; selecting, in the computer, information handling questions associated with the entity type from the pool of questions; presenting the selected information technology infrastructure questions from the computer to the first user and receiving corresponding user responses in the computer; presenting the selected information handling questions from the computer to the second user and receiving corresponding user responses in the computer; selecting, in the computer, an additional question from the pool of questions in response to one or more of the user responses; presenting the additional question from the computer to at least one of the users and receiving a corresponding user response in the computer; assessing information security in the computer, including comparing the user responses, including the user response to the additional question, to computer implemented logical associations between possible responses to the selected questions and corresponding vulnerability statements, wherein the comparing includes assessing an aspect of information security that relates to a combination of information technology infrastructure and information handling by comparing user responses associated with a combination of at least one of the information technology infrastructure questions and at least one of the information handling questions to a corresponding logical association; and outputting, from the computer, one or more of the vulnerability statements that correspond to the user responses.