Bank of America Corporation

David H Weaver

Manu Jacob Kurian

Sorin N Cismas

James P Scopis

Jacob Firestone

David Anthony Orr

Katherine McDonald

Sean Jamison

Tom Van Beek

Frank Davis Osborn

Diane Bomba

Peter Murphy

Michelle Kaiser

Marc Sandlhauser

A platform for providing authorization of electronic communication of secure data to external entities, e.g., vendors, third parties or the like based on an assessment of the data risk associated with communicating the data to the external entity. The secure data that is to be communicated, in the form of specific data items, are identified as well as the associated security standards. The external identity is assessed to ensure their capabilities to properly meet the enterprise/sender's information security, business privacy and continuity standards, along with applicable industry standards. Based on the results of the assessment, remediation action may be required to address critical vulnerabilities or recommendations may be presented to a decision-making entity to grant authorization to electronically communicate the data in question to the external entity. In response to granting authorization, secure communication channels are allocated and established to allow for communication of the data.

System for authorizing electronic communication of confidential or proprietary data to external entities

A tool to assess risks associated with software applications, and controls implemented to mitigate these risks, includes a first software component configured to gather information about the risks and controls, and a second software component configured to display the gathered information. The first software component includes a self-assessment tool which is invoked by a user to enter information reflective of risk levels over a number of risk categories. These risk levels are used to calculate a risk score associated with a particular application. The user also enters information as to whether or not a number of specific control attributes have been implemented, and this information is used to calculate a control score.

Application risk and control assessment tool

Growing community of inventors

Matthews, NC, United States of America

David H Weaver