Methods and systems for implementing automated controls assessment in computer systems
Methods and systems for scheduling execution of an automated controls assessment include receiving a user input to generate an automated controls assessment audit; receiving an area of audit for the audit; receiving a category of the audit; receiving scheduling data for executing the audit; determining whether the scheduling data is met; responsive to determining that the scheduling data is met, transmitting, to an API-based agent, an instruction to execute the audit; receiving, from the API-based agent, a response to the audit; processing, using a library of reusable features for controls assessment audits for a plurality of computer domains, the response to generate a result of the audit; and generating, for display, on a display device, an instance of a first user interface, wherein the instance of the first user interface comprises the result of the automated controls assessment audit.
1 . A non-transitory computer-readable medium storing computer program instructions that, when executed by one or more processors, effectuate operations comprising:
receiving a user input to generate an automated controls assessment audit;
receiving an area of audit for the automated controls assessment audit;
receiving a category of the automated controls assessment audit;
receiving scheduling data for executing the automated controls assessment audit;
determining whether the scheduling data is met;
responsive to determining that the scheduling data is met, transmitting, to an API-based agent, an instruction to execute the automated controls assessment audit;
receiving, from the API-based agent, a response to the automated controls assessment audit;
processing, using a library of reusable features for controls assessment audits for a plurality of computer domains, the response to generate a result of the automated controls assessment audit; and
generating, for display, on a display device, an instance of a first user interface, wherein the instance of the first user interface comprises the result of the automated controls assessment audit.
2 . The medium of claim 1 , wherein the scheduling data comprises an event that initiates the automated controls assessment audit.
3 . The medium of claim 1 , wherein receiving the scheduling data comprises:
receiving, via an instance of a second user interface, a user input to an option for selecting scheduling details of the automated controls assessment audit, wherein the scheduling details comprise the scheduling data.
4 . The medium of claim 3 , wherein the scheduling data comprises at least one of a time, frequency, or trigger that initiates the automated controls assessment audit.
5 . The medium of claim 1 , wherein the scheduling data comprises a scheduled time for the automated controls assessment audit, determining whether the scheduling data is met comprises:
determining a current time; and
determining whether the scheduled time corresponds to the current time, wherein the instruction to execute the automated controls assessment audit is transmitted to the API-based agent responsive to determining that the scheduled time corresponds to the current time.
6 . The medium of claim 1 , wherein the scheduling data comprises a frequency with which the automated controls assessment audit is to be executed, determining whether the scheduling data is met comprises:
determining an amount of time that has elapsed since a most recent execution of the automated controls assessment audit; and
determining whether the frequency with which the automated controls assessment audit is to be executed corresponds to the amount of time, wherein the instruction to execute the automated controls assessment audit is transmitted to the API-based agent responsive to determining that the frequency corresponds to the amount of time.
7 . The medium of claim 1 , wherein the operations further comprise:
generating, using a control manager application, the automated controls assessment audit, wherein the automated controls assessment audit provides proactive alerts before weaking of controls or non-compliance.
8 . The medium of claim 7 , wherein an instance of second user interface is used generate the automated controls assessment audit.
9 . The medium of claim 1 , wherein receiving the area of audit comprises:
receiving, via an instance of a second user interface, a user input selecting the area of audit.
10 . The medium of claim 1 , receiving the category of the automated controls assessment audit comprises:
receiving, via an instance of a second user interface, a user input selecting the category of the automated controls assessment audit.
11 . The medium of claim 10 , wherein the selected category of the automated controls assessment audit indicates at least one of: available automated controls assessment audits or group audits by at least one of function, domain, or application.
12 . The medium of claim 1 , wherein determining whether the scheduling data is met comprises iteratively determining whether a scheduled time when the automated controls assessment audit is to be executed corresponds to a current time.
13 . The medium of claim 1 , wherein the operations further comprise:
steps for generating the automated controls assessment audit.
14 . The medium of claim 1 , wherein the operations further comprise:
selecting the API-based agent from a plurality of API-based agents for executing the automated controls assessment audit.
15 . The medium of claim 1 , wherein the operations further comprise:
steps for generating the API-based agent.
16 . The medium of claim 1 , wherein the instruction to execute the automated controls assessment audit is transmitted via one or more instances of a second user interface.
17 . A method for scheduling execution of an automated controls assessment, the method being implemented by one or more processors executing computer program instructions to perform the method, the method comprising:
receiving a user input to generate an automated controls assessment audit;
receiving an area of audit for the automated controls assessment audit;
receiving a category of the automated controls assessment audit;
receiving scheduling data for executing the automated controls assessment audit;
determining whether the scheduling data is met;
responsive to determining that the scheduling data is met, transmitting, to an API-based agent, an instruction to execute the automated controls assessment audit;
receiving, from the API-based agent, a response to the automated controls assessment audit;
processing, using a library of reusable features for controls assessment audits for a plurality of computer domains, the response to generate a result of the automated controls assessment audit; and
generating, for display, on a display device, an instance of a first user interface, wherein the instance of the first user interface comprises the result of the automated controls assessment audit.
18 . A non-transitory computer-readable medium storing computer program instructions that, when executed by one or more processors, effectuate operations comprising:
receiving a user input to generate an automated controls assessment audit;
receiving scheduling data for executing the automated controls assessment audit;
responsive to determining that scheduling data is met, transmitting, to an API-based agent, an instruction to execute the automated controls assessment audit;
receiving, from the API-based agent, a response to the automated controls assessment audit;
processing, using a library of reusable features for controls assessment audits, the response to generate the result of the automated controls assessment audit; and
generating, for display, on a display device, an instance of a first user interface, wherein the instance of the first user interface comprises a result of the automated controls assessment audit generated based on the response to the automated controls assessment audit.
19 . The medium of claim 18 , wherein responsive to determining that the scheduling data is not met, the operations further comprise:
iteratively determining whether the scheduling data is met until it is determined that the scheduling data is met.
20 . The medium of claim 18 , wherein the scheduling data comprises a scheduled time for the automated controls assessment audit, determining whether the scheduling data is met comprises:
determining a current time; and
determining whether the scheduled time corresponds to the current time, wherein the instruction to execute the automated controls assessment audit is transmitted to the API-based agent responsive to determining that the scheduled time corresponds to the current time.
21 . The medium of claim 18 , wherein the scheduling data comprises a frequency with which the automated controls assessment audit is to be executed, determining whether the scheduling data is met comprises:
determining an amount of time that has elapsed since a most recent execution of the automated controls assessment audit; and
determining whether the frequency with which the automated controls assessment audit is to be executed corresponds to the amount of time, wherein the instruction to execute the automated controls assessment audit is transmitted to the API-based agent responsive to determining that the frequency corresponds to the amount of time.
22 . The medium of claim 18 , wherein the operations further comprise:
generating, using a control manager application, the automated controls assessment audit, wherein the automated controls assessment audit provides proactive alerts before weaking of controls or non-compliance.
23 . The medium of claim 18 , wherein the operations further comprise:
selecting the API-based agent from a plurality of API-based agents for executing the automated controls assessment audit.