Abstract: A method, system, and apparatus for facilitating the process of a corporate risk assessment procedure (which may be identified as an “ESA” or “Enterprise Security Assessment”) are disclosed. A method for data gathering and security assessment may allow security assessors to more readily combine the results of a documentation review process and the results of client interviews, and associate those findings with a broad set of sector-specific and international cyber security standards. This method may include aggregating both sets of data, displaying the aggregated data to the security assessor or another party in a convenient manner, executing functions on the data to transform it into a useful form, and electronically comparing the data to one or more cyber security standards. Data may then be communicated back to a user in the form of an electronic or hard-copy report. A system and apparatus may likewise be configured to perform these steps.

Abstract: Methods and systems for facilitating transactions are disclosed. A method for identifying corporate risk, implemented on a computer system, includes obtaining corporate data on computer-readable media, the corporate data comprising at least one of internal data and external data, obtaining behavioral corporate data from the corporate data on computer-readable media, the behavioral corporate data comprising at least one event data point, obtaining data indicative of risk-creating behavior from the behavioral corporate data on computer-readable media by evaluating the corporate data against a knowledge-base of characteristic risk-creating behavior, and communicating the data indicative of risk-creating behavior to a user as threat vectors with at least one dimension, the threat vectors displayed on a graphical user interface.