SYSTEM FOR AUTHORIZING ELECTRONIC COMMUNICATION OF CONFIDENTIAL OR PROPRIETARY DATA TO EXTERNAL ENTITIES

摘要

A platform for providing authorization of electronic communication of secure data to external entities, e.g., vendors, third parties or the like based on an assessment of the data risk associated with communicating the data to the external entity. The secure data that is to be communicated, in the form of specific data items, are identified as well as the associated security standards. The external identity is assessed to ensure their capabilities to properly meet the enterprise/sender's information security, business privacy and continuity standards, along with applicable industry standards. Based on the results of the assessment, remediation action may be required to address critical vulnerabilities or recommendations may be presented to a decision-making entity to grant authorization to electronically communicate the data in question to the external entity. In response to granting authorization, secure communication channels are allocated and established to allow for communication of the data.

主权项

1. An apparatus for granting authorization to electronically communicate secure data to an external entity, the apparatus comprising:
a computing platform having a memory and at least one processor in communication with the memory; and a data communication authorization module stored in the memory, executable by the processor and including:
an case submission application configured for, in response to a triggering event that requires electronic communication of secure data to an external entity, receiving user inputs that define first information associated with the external entity and second information associated with the secure data,a validation application configured for managing a process for validating the external entity for electronically communicating the secure data to the external entity, wherein the process for validating is based at least in part on the first and second information, anda data transmission application configured for, in response to validating the external entity and granting permission to communicate the secure data, manage a process for establishing a secure communication channel to communicate the secure data to the external entity.