Data processing systems and methods for providing training in a vendor procurement process
Data processing systems and methods, according to various embodiments, are adapted for performing a process of procuring a vendor and sub-processes associated therewith, such as performing vendor risk assessments and providing training specific to the procurement of that particular vendor. Training requirements for the user procuring the vendor and/or for the vendor itself are determined and any deficiencies in current, valid training requirements are identified. Training to address any identified deficiencies is provided as part of the vendor procurement process. Training may be customized based on trainee and/or organization attributes to improve the effectiveness of such training.
1. A method comprising:
detecting, by computing hardware, a request to procure a vendor for an entity, a vendor criteria parameter identifying the vendor, and a user parameter identifying a user, wherein the vendor is to provide at least one of a service or a product to the entity;
responsive to detecting the request:
determining, by the computing hardware and based on the vendor criteria parameter and at least one of a privacy impact assessment or a security assessment conducted on the vendor with respect to the vendor handling data for the entity, a training requirement associated with a procurement of the vendor;
determining, by the computing hardware and based on the user parameter, training data for the user, wherein the training data indicates a completion status identifying a progress of the user completing required training;
generating, by the computing hardware and based on the training data and the training requirement, customized training content comprising a portion of a training course associated with the training requirement, wherein generating the customized training content comprising the portion of the training course comprises at least one of determining that a regulation associated with the training course has changed since the user previously satisfied the training requirement or determining that a predetermined amount of time has passed since the user previously satisfied the training requirement;
generating, by the computing hardware, a graphical user interface by configuring a presentation element configured for presenting the customized training content on the graphical user interface; and
transmitting an instruction to a browser application executed on a user device causing the browser application to retrieve the customized training content and present the graphical user interface on the user device.
2. The method of claim 1 , wherein detecting the request to procure the vendor, the vendor criteria parameter, and the user parameter comprises detecting a state of the browser application, the state of the browser application comprising an indication of the request to procure the vendor, the vendor criteria parameter, and the user parameter.
3. The method of claim 1 , wherein the graphical user interface is further configured with a control element configured to generate an indication of completion of the customized training content and the method further comprises:
responsive to a selection of the control element, determining, by the computing hardware, to initiate a process to procure the vendor.
4. The method of claim 1 , wherein generating the customized training content comprising the portion of the training course comprises also determining that the training course has been updated since the user previously satisfied the training requirement.
5. The method of claim 1 , wherein the vendor criteria parameter comprises at least one of:
(a) a jurisdiction of the vendor,
(b) a classification of the vendor,
(c) a type of data processed by the vendor, or
(d) a volume of data processed by the vendor.
6. A system comprising:
processing hardware;
computer memory communicatively coupled to the processing hardware; and
a non-transitory computer-readable medium communicatively coupled to the processing hardware, and storing computer-executable instructions, wherein the processing hardware is configured for executing the computer-executable instructions and thereby performing operations comprising:
receiving a request to procure a vendor for an entity from a user via a remote device, wherein the vendor is to provide at least one of a service or a product to the entity;
determining vendor training criteria for the vendor;
retrieving training data for the user, wherein the training data indicates a completion status identifying a progress of the user completing required training;
determining a training requirement associated with a procurement of the vendor by the user based on the vendor training criteria, the training data, and at least one of a privacy impact assessment or a security assessment conducted on the vendor with respect to the vendor handling data for the entity;
determining that the user is no longer in compliance with the training requirement based on the training data and the training requirement;
responsive to determining that the user is no longer in compliance with the training requirement:
generating customized training content comprising a portion of a training course associated with the training requirement based on the training data and the training requirement, wherein generating the customized training content comprising the portion of the training course comprises at least one of determining that a regulation associated with the training course has changed since the user previously satisfied the training requirement or determining that a predetermined amount of time has passed since the user previously satisfied the training requirement; and
transmitting the customized training content to the remote device for presentation to the user;
receiving an indication from the remote device that the user has satisfied the training requirement; and
in response to receiving the indication, facilitating the procurement of the vendor.
7. The system of claim 6 , wherein the operations further comprise determining a vendor jurisdiction for the vendor, and determining the training requirement is further based on the vendor jurisdiction.
8. The system of claim 6 , wherein the operations further comprise determining a user jurisdiction for the user, and determining the training requirement is further based on the user jurisdiction.
9. The system of claim 6 , wherein the operations further comprise determining a role in an organization for the user, and determining the training requirement is further based on the role in the organization.
10. The system of claim 6 , wherein the operations further comprise determining a type of data to which the user will have access, and determining the training requirement is further based on the type of data.
11. The system of claim 6 , wherein determining the vendor training criteria comprises:
accessing a data map associated with the vendor to retrieve vendor attributes; and
determining the vendor training criteria based on the vendor attributes.
12. The system of claim 6 , wherein the training requirement comprises at least one of a privacy certification or a security certification.
13. A non-transitory computer-readable medium storing computer-executable instructions that, when executed by computing hardware, configure the computing hardware to perform operations comprising:
detecting a modification of training material associated with a procurement of a vendor for an entity, wherein the vendor is to provide at least one of a service or a product to the entity;
in response to detecting the modification of the training material, determining, based on at least one of a privacy impact assessment or a security assessment conducted on the vendor with respect to the vendor handling data for the entity, a training requirement associated with the training material;
retrieving training data for a user, wherein the training data indicates a completion status identifying a progress of the user completing required training;
determining that the user is no longer in compliance with the training requirement based on the modification of the training material;
in response to determining that the user is no longer in compliance with the training requirement:
generating customized training content comprising a portion of the training material based on the modification of the training material, wherein the modification comprises at least one of a regulation associated with the training course has changed since the user previously satisfied the training requirement or determining that a predetermined amount of time has passed since the user previously satisfied the training requirement; and
transmitting the customized training content and a request to satisfy the training requirement to the user.
14. The non-transitory computer-readable medium of claim 13 , wherein:
the training material is stored in a learning management system; and
detecting the modification of the training material comprises monitoring the learning management system for the modification of the training material.
15. The non-transitory computer-readable medium of claim 14 , wherein monitoring the learning management system comprises periodically monitoring the learning management system.
16. The non-transitory computer-readable medium of claim 13 , wherein detecting the modification of the training material comprises:
receiving a user request to update the training material; and
updating the training material in response to the user request.
17. The non-transitory computer-readable medium of claim 13 , wherein the request to satisfy the training requirement comprises a plurality of questions associated with the training material.
18. The non-transitory computer-readable medium of claim 13 , wherein the user is associated with the vendor.