Biometric cybersecurity and workflow management

1. A system for providing security to a workflow process on a web-based system, comprising:

a sensor configured to collect biometric data for a user;

a processor;

a data store storing biometric identity data for a plurality of authorized users; and

one or more non-transitory computer-readable media storing computer-executable instructions that, when executed by the processor, perform a method of proving security to a workflow process, the method comprising steps of:

receiving a request to transfer data from a first location to a second location;

detecting a threat associated with the transfer of the data,

wherein the data does not match at least one format of a previous update;

determining a risk level of the threat;

requesting a biometric authentication from the user based at least in part on the risk level of the threat;

receiving, via the sensor, biometric data indicative of an identity of the user;

comparing the biometric data indicative of the identity of the user with the biometric identity data stored in the data store;

determining, from the comparison of the biometric data indicative of the identity of the user with the biometric identity data stored in the data store, that the user meets a minimum requirement;

receiving, from the user, an approval of the transfer of the data, and

automatically performing an update to store the format such that the data will not be considered a threat in the future.

2. The system of claim 1 , wherein the sensor is selected from a group consisting of a retinal scanner and a camera.

3. The system of claim 1 ,

wherein the sensor is a fingerprint scanner on a mobile device of the user and the request is made via the mobile device of the user,

wherein a fingerprint scan is one factor of a multifactor authentication.

4. The system of claim 1 ,

wherein the risk level of the threat is determined in part based on a determination that sensitive data is being transferred,

wherein the risk level of the threat is determined by a third-party system.

5. The system of claim 1 , wherein the risk level of the threat is determined in part based on a determination that malicious code is being transferred.

6. The system of claim 1 , wherein the method further comprises the step of storing information indicative of the data and the approval of the transfer of the data.

7. The system of claim 6 , wherein the method further comprises the step of updating a threat profile with the stored information for automatically detecting future threats based at least in part on the stored information.

8. The system of claim 7 , wherein the method further comprises the step of updating a firewall rule based on the updated threat profile.

9. The system of claim 1 , wherein the data is received from a network service center.

10. The system of claim 1 , wherein the data is received from an application supported by the web-based system.

11. A method for providing security to a workflow process in a system, comprising the steps of:

receiving a request to transfer data from a first location to a second location;

analyzing the data to determine a risk level of the data,

wherein the risk level is based on a format of the data compared to a regulation format;

if the risk level of the data is above a predetermined threshold, requesting identity information from a user;

receiving the identity information from the user via a biometric sensor;

comparing the identity information from the biometric sensor with stored biometric data;

determining whether the identity information from the biometric sensor and the stored biometric data match;

if the identity information from the biometric sensor matches the stored biometric data, approving the request to transfer the data; and

if the identity information from the biometric sensor does not match the stored biometric data, denying the request to transfer the data.

12. The method of claim 11 , further comprising the step of activating the biometric sensor via a web-based application.

13. The method of claim 11 ,

wherein the biometric sensor is a camera, and

wherein the camera is one factor of a multifactor identification.

14. The method of claim 11 , wherein the threshold is configurable by an administrator of the system.

15. The method of claim 11 , wherein the identity information includes at least one of fingerprint information, facial recognition information, retinal information, and DNA information.

16. One or more non-transitory computer storage media storing computer-executable instructions that, when executed by a processor, perform a method of providing security to a workflow process on a web-based system, the method comprising the steps of:

receiving a request to transfer data from a first user via a first device running an application on the web-based system;

determining a security level of the data;

if the security level of the data is above a threshold, requesting authentication from an authorized user on an enrolled and verified device;

receiving biometric information indicative of an identity of the authorized user from a biometric sensor;

comparing the biometric information with stored biometric information indicative of the identity of an authorized user;

determining whether the biometric data matches the stored biometric information; and

if the biometric data matches the stored biometric data, approving the request to transfer the data from the first user.

17. The media of claim 16 , wherein the biometric data is received by an application supported by the web-based system.

18. The media of claim 16 , wherein the method further comprises the step of:

denying the request to transfer data if the authorized user does not meet a necessary requirement to access the data,

wherein the level of security of the data and the necessary requirement to access the data are set by an administrator of the web-based system.

19. The media of claim 16 , wherein the level of security of the data is indicative of a risk of regulatory non-compliance.

20. The media of claim 16 , wherein the method further comprises the steps of:

storing information indicative of the data and the approval of the transfer of the data;

updating a security profile with the stored information such that the threshold is increased;

receiving a second request to transfer second data from the application running on the web-based system;

determining that a second security level of the data is below the increased threshold; and

approving the request to transfer the data without requesting authentication.