INTEGRATED, RULES-BASED SECURITY COMPLIANCE AND GATEWAY SYSTEM

摘要

Processes which enable regulated enterprises to efficiently manage regulatory compliance of computer networks and their users. One computer-implemented process involves providing a query database having information representing a plurality of queries, each query being associated in the query database with one or more of a plurality of specific industry regulations; receiving a selection of one or more of the plurality of specific industry regulations and displaying one or more of the queries associated with the selected industry regulations to a user of a computer network under the control of a regulated enterprise; receiving and storing one or more answers provided by the user to the one or more queries displayed; providing a report-writing database having information indicative of one or more statements, each of the statements being associated in the report-writing database with at least one answer provided by the user to at least one query displayed to the user; and generating from the report-writing database a compliance report with one or more of the statements associated with the stored answers .