Abstract: A system includes a standards inventory database to store at least one control model, the at least one control model including at least one control objective and one or more controls, wherein each of the one or more controls is related to at least one asset of an organization, a tests datastore to store one or more control tests to be applied to the at least one asset of the organization, each of the one or more controls being associated with at least one of the one or more control tests, and a server including a testing tool to evaluate each of the one or more controls using the at least one of the one or more control tests associated with each of the one or more controls and to assign a status to the one or more control tests, and a metrics engine to track performance metrics of each of the one or more controls based on the status of the one or more control tests to provide trends in compliance with the one or more controls.

Abstract: An organization asset database (ADb) is described that contains a complete, up-to-date, secure, and easily accessible inventory of the organization's assets. Each asset is mapped onto a structure that represents the organizational hierarchy of the organization, which provides for multiple levels of accountability for each asset. Each asset has one or more roles in relation to other assets in the ADb and has one or more entitlements in relation to other assets in the ADb. The relationship between assets ensures that the ADb is complete and up-to-date and allows for easy filtering and retrieval of the information contained in the ADb.