Abstract: This document describes a computer-implemented method that includes storing information in a standardized format about an organization's susceptibility to social engineering in a plurality of network-based, non-transitory storage devices having a collection of social engineering risk indicators stored thereon; importing, using an integration layer, non-standardized updated information about the organization from one or more data sources; converting, using a first analytics engine, the non-standardized updated information into the standardized format; and transmitting, via the integration layer, the standardized updated information for one or more organizations to a second analytics engine configured to determine a transaction risk indicator for a transaction.