Automated risk assessment module with real-time compliance monitoring

    公开(公告)号:US12166788B2

    公开(公告)日:2024-12-10

    申请号:US18469893

    申请日:2023-09-19

    Applicant: OneTrust LLC

    Abstract: Techniques are disclosed for usage-tracking of various information security (InfoSec) entities for tenants/organization onboarded on an instant multi-tenant security assurance platform. The InfoSec entities include policies, procedures, controls and evidence tasks. A policy or procedure is enforced by implementing one or more controls, and the collection of one or more evidence tasks proves/verifies the implementation of a control. The InfoSec entities are linked to each other across the platform and accrue a number of benefits for the tenants. These include generating a security questionnaire response (SQR), defining a readiness project and an audit project, sharing InfoSec entities encompassing the various products of a tenant, automating risk assessment, automatic collection of evidence tasks for verifying the implementation and/or operational state/status of various mitigating controls, etc.

    Data processing consent sharing systems and related methods

    公开(公告)号:US12158975B2

    公开(公告)日:2024-12-03

    申请号:US18110511

    申请日:2023-02-16

    Applicant: OneTrust, LLC

    Abstract: In various embodiments, an entity may provide a WebView where a transaction between an entity and a data subject may be performed. As described herein, the transaction may involve the collection or processing of personal data associated with the data subject by the entity as part of a processing activity undertaken by the entity that the data subject is consenting to as part of the transaction. Additionally, the entity may provide a native application where the transactions between the entity and a data subject may be performed. In some embodiments, the system may be configured to share consent data between the WebView and the native application so data subjects experience a seamless transition while using either the WebView or the native application, and the data subjects are not required to go through a consent workflow for each of the WebView and the native application.

    AUTO-BLOCKING SOFTWARE DEVELOPMENT KITS BASED ON USER CONSENT

    公开(公告)号:US20240385916A1

    公开(公告)日:2024-11-21

    申请号:US18687219

    申请日:2022-10-03

    Applicant: OneTrust, LLC

    Abstract: Aspects of the present invention provide methods, apparatuses, systems, computing devices, computing entities, and/or the like for auto-blocking of software development kit functionality for mobile software applications based on consent (or lack thereof) provided by users who are interacting with the mobile software applications.

    SYSTEMS AND METHODS FOR AUTOMATICALLY BLOCKING THE USE OF TRACKING TOOLS

    公开(公告)号:US20240195835A1

    公开(公告)日:2024-06-13

    申请号:US18586958

    申请日:2024-02-26

    Applicant: OneTrust, LLC

    CPC classification number: H04L63/1475 H04L63/1416

    Abstract: Embodiments of the present invention provide methods, apparatus, systems, computing devices, computing entities, and/or the like for permitting or blocking tracking tools used through webpages. In particular embodiments, the method involves: scanning a webpage to identify a tracking tool configured for processing personal data; determining a data destination location that is associated with the tracking tool; and generating program code configured to: determine a location associated with a user who is associated with a rendering of the webpage; determine a prohibited data destination location based on the location associated with the user; determine that the data destination location associated with the tracking tool is not the prohibited data destination location; and responsive to the data destination location associated with the tracking tool not being the prohibited data destination location, permit the tracking tool to execute.

    PROCESSING AND PUBLISHING SCANNED DATA FOR DETECTING ENTITIES IN A SET OF DOMAINS VIA A PARALLEL PIPELINE

    公开(公告)号:US20240143674A1

    公开(公告)日:2024-05-02

    申请号:US18476185

    申请日:2023-09-27

    Applicant: OneTrust LLC

    CPC classification number: G06F16/951 G06F9/5027

    Abstract: Methods, systems, and non-transitory computer readable storage media are disclosed for processing data for a subset of domains in parallel with publishing data to a tenant database for another subset of domains within a shared infrastructure. Specifically, the disclosed system assigns one or more partitions of an intermediate shared processing queue to a set of domains indicated by a scan request from a client device. The disclosed system extracts data from a subset of domains of the set of domains via the one or more partitions and publishes scan results of the subset of domains to the tenant database. Furthermore, the disclosed system extracts, in parallel with publishing the data of the subset of domains, additional data of an additional subset of domains via the one or more partitions of the intermediate shared processing queue.

    Systems and methods for automatically blocking the use of tracking tools

    公开(公告)号:US11968229B2

    公开(公告)日:2024-04-23

    申请号:US17942242

    申请日:2022-09-12

    Applicant: OneTrust, LLC

    CPC classification number: H04L63/1475 H04L63/1416

    Abstract: Embodiments of the present invention provide methods, apparatus, systems, computing devices, computing entities, and/or the like for permitting or blocking tracking tools used through webpages. In particular embodiments, the method involves: scanning a webpage to identify a tracking tool configured for processing personal data; determining a data destination location that is associated with the tracking tool; and generating program code configured to: determine a location associated with a user who is associated with a rendering of the webpage; determine a prohibited data destination location based on the location associated with the user; determine that the data destination location associated with the tracking tool is not the prohibited data destination location; and responsive to the data destination location associated with the tracking tool not being the prohibited data destination location, permit the tracking tool to execute.

    SYSTEMS AND METHODS FOR MITIGATING RISKS OF THIRD-PARTY COMPUTING SYSTEM FUNCTIONALITY INTEGRATION INTO A FIRST-PARTY COMPUTING SYSTEM

    公开(公告)号:US20240098109A1

    公开(公告)日:2024-03-21

    申请号:US18275910

    申请日:2022-02-10

    Applicant: OneTrust, LLC

    CPC classification number: H04L63/1433 G06F21/60

    Abstract: In general, various aspects of the present invention provide methods, apparatuses, systems, computing devices, computing entities, and/or the like for integrating third party computing system functionality into a first party computing system by providing a risk management and mitigation computing system configured to analyze a risk of integrating the functionality provided by the third party computing system and facilitating implementation of one or more data-related controls that include performing computer-specific operations to mitigate and/or eliminate the identified risks. For example, the risk management and mitigation computing system can access risk data in tenant computing systems to determine a risk score related to the integration of the third party computing system functionality based on risks determined during prior integrations of the third party computing system functionality by other tenant computing systems. The risk management and mitigation computing system can generate a recommended control when integrating the third party computing system functionality.

    MANAGING THE DEVELOPMENT AND USAGE OF MACHINE-LEARNING MODELS AND DATASETS VIA COMMON DATA OBJECTS

    公开(公告)号:US20230376852A1

    公开(公告)日:2023-11-23

    申请号:US18319301

    申请日:2023-05-17

    Applicant: OneTrust LLC

    CPC classification number: G06N20/00

    Abstract: Methods, systems, and non-transitory computer readable storage media are disclosed for managing implementation of machine-learning models within computing environments according to system requirements frameworks via common data objects. The disclosed system generates a common data object to represent an implementation of a machine-learning model with a data process. For example, the disclosed system determines attribute values of the common data object according to data objects representing the machine-learning model and related datasets. Furthermore, the disclosed system utilizes the common data object to validate the machine-learning model according to a digital representation of a system requirements framework that includes usage requirements for machine-learning models to store, process, transmit, or otherwise handle specific data types in specific ways for the one or more data processes within a computing environment. The disclosed systems also perform operations to implement, suspend, or otherwise modify the machine-learning model or datasets based on the validation.

Patent Agency Ranking