AUTOMATED CERTIFICATION BASED ON ROLE

• US 20140101437A1
• Filed: 10/04/2012
• Published: 04/10/2014
• Est. Priority Date: 10/04/2012
• Status: Abandoned Application

• Current Assignee: Wurldtech Security Technologies
• Original Assignee: Wurldtech Security Technologies
• Inventors: Kube, Nathan John Walter, Holstein, Dennis, Faifman, Gabriel
• Application Number:
  US13/644,372
• Publication Number:
  US 20140101437A1
• Time in Patent Office: Days
• US Class Current: 713/155
• CPC Class Codes: G06Q 10/1053 Employment or hiring
• CPC Class Codes: G06Q 50/2057 Career enhancement or continuing education service
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

In one aspect, systems and methods for generating a set of certification requirements based on a defined role and certification level for a requesting entity are provided. A target set of certification requirements is organized according to a set of process areas that are applicable to one or more roles. Each process area is defined into a set of process area subgroups, which is further defined according to base practice objectives. Each base practice objective includes an identification of certification requirements. Each of the certification requirements may be applicable to a requesting entity based on the specified level of certification. In another aspect, an entity may request certification based on an evaluation of certification information submitted by the entity against a set of previously determined applicable certification requirements. The certification authority can utilize a variety of thresholds to determine whether certification is appropriate or what level of certification is appropriate.

Claims

1. A method for managing certifications of entities comprising:

obtaining a request for certification of an entity, wherein the request for certification includes a specification of a role for the entity, the role selected as one of a vendor, an integrator or a service provider and wherein the request for certification includes a specification of a level of certification selected from one of three levels of certification;

obtaining a set of certification requirements, the set of certification requirements organized according to a set of process areas, each process area is applicable to one or more roles;

wherein each process area defines a set of process area subgroups;

wherein each process area subgroup defines one or more base practice objectives; and

wherein each base practice objective defines two or more certification requirements organized by a level of certification, wherein at least two certification requirements correspond to different levels of the three level of certification;

identifying two or more process areas applicable to the request for certification based on the role identified in the request for certification, wherein the identified two or more process areas define a target set of certification requirements;

for each identified process area;

iteratively identifying one or more certification requirements based on whether a certification level associated with each of the target set of certification requirements is satisfied by the specification of the level of certification in the request for certification;

providing the identified one or more certification requirements responsive to the request for certification;

obtaining information indicative of certification information corresponding to the identified one or more certification requirements;

analyzing the certification information to identify a number of certification requirements that are indicative of being implemented, a number of certification requirements that may be implemented in the future, and a number of certification requirements that have not been implemented;

comparing the number of certification requirements that are indicative of being implemented, the number of certification requirements that may be implemented in the future, and the number of certification requirements that have not been implemented with one or more thresholds; and

determining certification based on the comparison.

2. The method as recited in claim 1, wherein the set of process areas include at least one process area applicable to all roles.

3. The method as recited in claim 1, wherein the set of process areas include at least one process area applicable to a single role.

4. The method as recited in claim 1, wherein each base process practice objective includes at least one certification requirement for each of the three levels of certification.

5. The method as recited in claim 1, wherein the three levels of certification are hierarchically arranged.

6. The method as recited in claim 5:

wherein a first level of certification requirements corresponds to a minimum number of certification requirements,

wherein a second level of certification requirements corresponds to the minimum number of certification requirements from the first level plus a first additional number of certification requirements, and

wherein a third level of certification requirements corresponds to the minimum number of certification requirements from the first level, the first additional requirements number of certification requirements from the second level and a second additional number of certification requirements.

7. The method as recited in claim 5, wherein each of the three levels has no overlapping certification requirements.

8. The method as recited in claim 1, wherein the one or more thresholds correspond to a maximum number of certification requirements that may be implemented in the future.

9. The method as recited in claim 1, wherein the one or more thresholds correspond to a maximum number of certification requirements that have not been implemented.

10. The method as recited in claim 1, wherein the number of certification requirements that may be implemented in the future are associated with time criteria.

11. The method as recited in claim 1, wherein determining certification based on the comparison includes determining a specified level of certification has been satisfied.

12. The method as recited in claim 1, wherein determining certification based on the comparison includes determining a specified level of certification has not been satisfied.

13. A method for managing certifications of entities comprising:

obtaining a request for certification of an entity, wherein the request for certification includes a specification of a role for the entity, the role selected as one of a set of roles and wherein the request for certification includes a specification of a level of certification selected from a set of levels of certification;

obtaining a set of certification requirements, the set of certification requirements organized according to a set of process areas, each process area is applicable to one or more roles;

wherein each process area defines a set of process area subgroups;

wherein each process area subgroup defines one or more base practice objectives; and

wherein each base practice objective defines certification requirements organized by a level of certification;

identifying process areas applicable to the request for certification based on the role identified in the request for certification, wherein the identified process areas define a target set of certification requirements;

for each identified process area;

iteratively identifying one or more certification requirements based on whether a certification level associated with each of the target set of certification requirements is satisfied by the specification of the level of certification in the request for certification;

providing the identified one or more certification requirements responsive to the request for certification.

14. The method as recited in claim 13, wherein the set of process areas include at least one process area applicable to all roles.

15. The method as recited in claim 13, wherein the set of process areas include at least one process area applicable to a single role.

16. The method as recited in claim 13, wherein each base process practice objective includes at least one certification requirement for each of the levels of certification.

17. The method as recited in claim 13, wherein the three levels of certification are hierarchically arranged.

18. The method as recited in claim 13, wherein at least two certification requirements correspond to different levels of the level of certification.

19. A method for managing certifications of entities comprising:

obtaining information indicative of certification information corresponding to a set of identified certification requirements,

wherein the certification requirements were determined by processing a set of certification requirements to a selected role and certification level;

wherein the set of certification requirements are organized according to a set of process areas, each process area is applicable to one or more roles;

wherein each process area defines a set of process area subgroups;

wherein each process area subgroup defines one or more base practice objectives; and

wherein each base practice objective defines two or more certification requirements organized by a level of certification, wherein at least two certification requirements correspond to different levels of the three level of certification;

analyzing the certification information to identify a number of certification requirements that are indicative of being implemented, a number of certification requirements that may be implemented in the future, and a number of certification requirements that have not been implemented;

comparing the number of certification requirements that are indicative of being implemented, the number of certification requirements that may be implemented in the future, and the number of certification requirements that have not been implemented with one or more thresholds; and

determining certification based on the comparison.

20. The method as recited in claim 19, wherein the three levels of certification are hierarchically arranged.

21. The method as recited in claim 19, wherein the one or more thresholds correspond to a maximum number of certification requirements that may be implemented in the future.

22. The method as recited in claim 19, wherein the one or more thresholds correspond to a maximum number of certification requirements that have not been implemented.

23. The method as recited in claim 19, wherein the number of certification requirements that may be implemented in the future are associated with time criteria.

24. The method as recited in claim 19, wherein determining certification based on the comparison includes determining a specified level of certification has been satisfied.

25. The method as recited in claim 19, wherein determining certification based on the comparison includes determining a specified level of certification has not been satisfied.