Abstract: A system for application access control is disclosed. First, a business coordinator needs to register a user developed tool (UDT) containing an application to be protected with the system via a software program. After registration, a random encrypted password is generated by the application access control server and stored in its back-end database as well as a local break-glass database corresponding to the UDT. When an entitled user accesses the application in the registered UDT later on, the system will check whether he/she is entitled to access the requested application. If yes, the system will retrieve the encrypted password for that application and thus launch the application.

Abstract: A system for application access control is disclosed. First. a business coordinator needs to register a user developed tool (UDT) containing an application to be protected with the system via a software program. After registration. a random encrypted password is generated by the application access control server and stored in its back-end database as well as a local break-glass database corresponding to the UDT. When an entitled user accesses the application in the registered UDT later on, the system will check whether he/she is entitled to access the requested application. If yes. the system will retrieve the encrypted password for that application and thus launch the application.

Abstract: Methods for information security assessment and data risk scoring are disclosed. A disclosed method includes identifying a plurality of parameters relevant to information security of information systems, establishing at least two risk levels associated with each of the plurality of parameters, assigning a numerical score to each of the at least two risk level associated with each of the plurality of parameters, recording the parameters, risk levels and numerical scores into one or more data structures, and assessing and scoring information security of a specified information system and/or collectively for an entire enterprise based at least in part on the one or more data structures.