Methods and systems for implementing automated controls assessment in computer systems

1. A system for implementing automated controls assessment through an application programming interface (“API”) driven software development kit, the system comprising:

cloud-based storage circuitry configured to:

store a library of reusable features for controls assessment audits for a plurality of computer domains;

cloud-based control circuitry configured to:

receive, at a control manager application, a first user input initiating a first automated controls assessment audit of a first audit area;

determine, at the control manager application, a first domain of the plurality of computer domains corresponding to the first audit area;

determine, at the control manager application, a first API-based agent of a plurality of API-based agents corresponding to the first domain for performing the first automated controls assessment audit;

receive, at the control manager application, a first response, from the first API-based agent, to the first automated controls assessment audit; and

process, at the control manager application, the first response using the library of reusable features to generate a first result of the first automated controls assessment audit;

cloud-based I/O circuitry configured to:

generate for display, on a display device, a first instance of a user interface comprising an option for selecting the first audit area and an option for initiating the first automated controls assessment audit; and

generate for display, on the display device, a second instance of the user interface comprising the first result, wherein the first result comprises an outcome of the first automated controls assessment audit.

2. A method for implementing automated controls assessment through an application programming interface (“API”) driven software development kit, the method comprising:

receiving, using control circuitry, at a first instance of a user interface of a control manager application, a first user input initiating a first automated controls assessment audit of a first audit area;

determining, using the control circuitry, a first domain of a plurality of computer domains corresponding to the first audit area;

determining, using the control circuitry, a first API-based agent of a plurality of API-based agents corresponding to the first domain for performing the first automated controls assessment audit;

receiving a first response, from the first API-based agent, to the first automated controls assessment audit;

processing the first response, using a library of reusable features for controls assessment audits for the plurality of computer domains, to generate a first result of the first automated controls assessment audit; and

generating for display, on a display device, a second instance of the user interface, wherein the second instance comprises the first result.

3. The method of claim 2 , wherein the first result comprises an outcome of the first automated controls assessment audit.

4. The method of claim 2 , wherein the first API-based agent generates the first response based on features specific to the first API-based agent, wherein the features specific to the first API-based agent includes evidence collection, a control assessment ruleset, a data library, an action response assignment, or an aggregation indicator.

5. The method of claim 2 , wherein each of the plurality of API-based agents is created using a standardized software development kit.

6. The method of claim 2 , wherein the first response is received in a standardized response format for the plurality of API-based agents.

7. The method of claim 2 , wherein the first API-based agent generates the first response using standardized assessment logic that is standardized for the plurality of API-based agents and control logic that is not standardized for the plurality of API-based agents.

8. The method of claim 2 , wherein the first API-based agent generates the first response using standardized assessment logic that is in a first programming language and control logic that is in a second programming language.

9. The method of claim 2 , further comprising:

receiving, at the first instance of the user interface, a second user input subscribing to the first domain for the first automated controls assessment audit; and

in response to the second user input, identifying a tag corresponding to the first domain, wherein the first domain is determined to correspond to the first audit area based on the tag.

10. The method of claim 2 , wherein the first API-based agent comprises control logic that includes a field for managing frontend rendering of a control assessment ruleset.

11. The method of claim 2 , further comprising:

receiving a second user input initiating a second automated controls assessment audit of a second audit area;

determining a second domain of the plurality of computer domains corresponding to the second audit area;

determining a second API-based agent of the plurality of API-based agents corresponding to the second domain for performing the second automated controls assessment audit;

receiving a second response, from the second API-based agent, to the second automated controls assessment audit;

processing the second response, using the library of reusable features for controls assessment audits for the plurality of computer domains, to generate a second result of the second automated controls assessment audit;

comparing the first result and the second result; and

generating for display, on a display device, a third instance of the user interface, wherein the third instance is based on the first result and the second result.

12. A non-transitory computer-readable medium for implementing automated controls assessment through an application programming interface (“API”) driven software development kit, comprising instructions that, when executed by one or more processors, cause operations comprising:

receiving, at a first instance of a user interface of a control manager application, a first user input initiating a first automated controls assessment audit of a first audit area;

determining a first domain of a plurality of computer domains corresponding to the first audit area;

determining a first API-based agent of a plurality of API-based agents corresponding to the first domain for performing the first automated controls assessment audit;

receiving a first response, from the first API-based agent, to the first automated controls assessment audit;

processing the first response, using a library of reusable features for controls assessment audits for the plurality of computer domains, to generate a first result of the first automated controls assessment audit; and

generating for display, on a display device, a second instance of the user interface, wherein the second instance comprises the first result, wherein the first result comprises an outcome of the first automated controls assessment audit.

13. The non-transitory computer-readable medium of claim 12 , wherein the first API-based agent generates the first response based on features specific to the first API-based agent, wherein the features specific to the first API-based agent includes evidence collection, a control assessment ruleset, a data library, an action response assignment, or an aggregation indicator.

14. The non-transitory computer-readable medium of claim 12 , wherein each of the plurality of API-based agents is created using a standardized software development kit.

15. The non-transitory computer-readable medium of claim 12 , wherein the first response is received in a standardized response format for the plurality of API-based agents.

16. The non-transitory computer-readable medium of claim 12 , wherein the first API-based agent generates the first response using standard assessment logic that is standardized for the plurality of API-based agents and control logic that is not standardized for the plurality of API-based agents.

17. The non-transitory computer-readable medium of claim 12 , wherein the first API-based agent generates the first response using standardized assessment logic that is in a first programming language and control logic that is in a second programming language.

18. The non-transitory computer-readable medium of claim 12 , further comprising instructions that, when executed by one or more processors, cause operations comprising:

receiving, at the first instance of the user interface, a second user input subscribing to the first domain for the first automated controls assessment audit; and

in response to the second user input, identifying a tag corresponding to the first domain, wherein the first domain is determined to correspond to the first audit area based on the tag.

19. The non-transitory computer-readable medium of claim 12 , wherein the first API-based agent comprises control logic that includes a field for managing frontend rendering of a control assessment ruleset.

20. The non-transitory computer-readable medium of claim 12 , further comprising instructions that, when executed by one or more processors, cause operations comprising:

receiving a second user input initiating a second automated controls assessment audit of a second audit area;

determining a second domain of the plurality of computer domains corresponding to the second audit area;

determining a second API-based agent of the plurality of API-based agents corresponding to the second domain for performing the second automated controls assessment audit;

receiving a second response, from the second API-based agent, to the second automated controls assessment audit;

processing the second response, using the library of reusable features for controls assessment audits for the plurality of computer domains, to generate a second result of the second automated controls assessment audit;

comparing the first result and the second result; and

generating for display, on a display device, a third instance of the user interface, wherein the third instance is based on the first result and the second result.