Data processing and scanning systems for assessing vendor risk
Data processing systems and methods, according to various embodiments, are adapted for efficiently processing data to allow for the streamlined assessment of risk ratings for one or more vendors. In various embodiments, the systems/methods may use one or more particular vendor attributes (e.g., as determined from scanning one or more webpages associated with the particular vendor) and the contents of one or more completed privacy templates for the vendor to determine a vendor risk rating for the particular vendor. As a particular example, the system may scan a website associated with the vendor to automatically determine one or more security certifications associated with the vendor and use that information, along with information from a completed privacy template for the vendor, to calculate a vendor risk rating that indicates the risk of doing business with the vendor.
1. A method comprising:
scanning, by computing hardware, a webpage associated with a vendor to identify a security certification, wherein the security certification is associated with a certifying authority and indicates that the vendor is in compliance with security certification requirements of the certifying authority;
calculating, by the computing hardware, a vendor risk rating based on the security certification;
generating, by the computing hardware and based on the vendor risk rating, a graphical user interface comprising a menu for managing a computerized workflow related to the vendor, the menu comprising a navigation element and a display element from the graphical user interface, wherein:
the navigation element is configured for initiating a responsive action based on the vendor risk rating, and
the display element is configured for presenting the vendor risk rating;
transmitting, by the computing hardware, an instruction to a user computing device to present the graphical user interface on the user computing device;
detecting, by the computing hardware, selection of the navigation element; and
responsive to detecting the selection of the navigation element, initiating, by the computing hardware, the responsive action.
2. The method of claim 1 , wherein scanning the webpage comprises scanning the webpage for content indicating receipt of the security certification by the vendor.
3. The method of claim 1 , wherein scanning the webpage comprises scanning the webpage for an image indicating receipt of the security certification by the vendor.
4. The method of claim 1 , wherein scanning the webpage comprises scanning computer code associated with the webpage to identify an indication of the security certification.
5. The method of claim 1 , wherein the responsive action comprises:
generating a second graphical user interface comprising an indication of the vendor risk rating, and
transmitting a second instruction to a third-party computing device to present the second graphical user interface on the third-party computing device.
6. The method of claim 1 , wherein the responsive action comprises:
generating an electronic communication comprising an indication of the vendor risk rating, and
transmitting the electronic communication to a third-party computing device.
7. A system comprising:
a non-transitory computer-readable medium storing instructions; and
a processing device communicatively coupled to the non-transitory computer-readable medium, wherein the processing device is configured to execute the instructions and thereby perform operations comprising:
scanning a webpage associated with a vendor to identify a security certification, wherein the security certification is associated with a certifying authority and indicates that the vendor is in compliance with security certification requirements of the certifying authority;
determining a vendor risk rating based on the security certification;
determining that the vendor risk rating meets a threshold risk rating;
generating, by the computing hardware and based on the vendor risk rating, a graphical user interface comprising a menu for managing a computerized workflow related to the vendor, the menu comprising a navigation element and a display element from the graphical user interface, wherein:
the navigation element is configured for initiating a responsive action based on the vendor risk rating, and
the display element is configured for presenting the vendor risk rating;
transmitting an instruction to a user computing device to present the graphical user interface on the user device;
detecting a selection of the first navigation element; and
responsive to detecting the selection of the first navigation element, initiating the responsive action.
8. The system of claim 7 , wherein scanning the webpage comprises at least one of scanning the webpage for content indicating receipt of the security certification by the vendor, scanning the webpage for an image indicating receipt of the security certification by the vendor, or scanning computer code associated with the webpage to identify an indication of the security certification.
9. The system of claim 7 , wherein the responsive action comprises:
generating a second graphical user interface comprising an indication of the vendor risk rating, and
transmitting a second instruction to a third-party computing device to present the second graphical user interface on the third-party computing device.
10. The system of claim 7 , wherein the responsive action comprises:
generating an electronic communication comprising an indication of the vendor risk rating, and
transmitting the electronic communication to a third-party computing device.
11. The system of claim 7 , wherein the operations further comprise:
determining a public information factor based on public information associated with the vendor and the vendor risk rating is further based on the public information factor.
12. The system of claim 7 , wherein the operations further comprise:
determining a presence of a suitable privacy notice on the website, and the vendor risk rating is further based on the presence of the suitable privacy notice.
13. The system of claim 7 , wherein the operations further comprise:
determining a presence of a control center on the website that enables a visitor to the website to allow collection of certain data, and the vendor risk rating is further based on the presence of the control center.
14. A non-transitory computer-readable medium storing computer-executable instructions that, when executed by processing hardware, causes the processing hardware to perform operations comprising:
scanning a webpage associated with a vendor to identify a security certification, wherein the security certification is associated with a certifying authority and indicates that the vendor is in compliance with security certification requirements of the certifying authority;
accessing a database of security certifications to determine that the vendor actually holds the security certification;
determining a vendor risk rating based on the security certification;
generating, by the computing hardware and based on the vendor risk rating, a graphical user interface comprising a menu for managing a computerized workflow related to the vendor, the menu comprising a navigation element and a display element from the graphical user interface, wherein:
the navigation element is configured for initiating a responsive action based on the vendor risk rating, and
the display element is configured for presenting the vendor risk rating;
detecting a selection of the first navigation element; and
responsive to detecting the selection of the first navigation element, initiating the first responsive action.
15. The non-transitory computer-readable medium of claim 14 , wherein the first responsive action comprises transferring the vendor risk rating to a current or potential customer of the vendor for use in assessing a risk of doing business with the vendor.
16. The non-transitory computer-readable medium of claim 14 , wherein the second responsive action comprises navigating to a display element that presents an indication that the vendor risk rating does meet the threshold risk rating.
17. The non-transitory computer-readable medium of claim 14 , wherein the second responsive action comprises:
generating an electronic communication comprising an indication of the vendor risk rating does meet the threshold risk rating, and
transmitting the electronic communication to a third-party computing device.
18. The non-transitory computer-readable medium of claim 14 , wherein scanning the webpage comprises at least one of scanning the webpage for content indicating receipt of the security certification by the vendor, scanning the webpage for an image indicating receipt of the security certification by the vendor, or scanning computer code associated with the webpage to identify an indication of the security certification.
19. The non-transitory computer-readable medium of claim 14 , wherein the operations further comprise:
determining a presence of a suitable privacy notice on the website, and the vendor risk rating is further based on the presence of the suitable privacy notice.
20. The non-transitory computer-readable medium of claim 14 , wherein the operations further comprise:
determining a presence of a control center on the website that enables a visitor to the website to allow collection of certain data, and the vendor risk rating is further based on the presence of the control center.