Reporting and management of computer systems and data sources
View Patent ↗A system and method are provided for managing data, such as for example security or other business data. For the example of security data, security data is received from a plurality of assets that may or may not be remotely located. A plurality of security metrics are computed and normalized according to thresholds. Security metrics are aggregated to generate an aggregate score, this may include weighting the metrics according to metric priorities. A change effort corresponding to each metric is also received and a corresponding change effort for the aggregate score is calculated. Aggregate scores and aggregate change efforts are analyzed to generate risk reduction recommendations. Upon instruction, metrics corresponding to an aggregate score may be displayed including recommendations of metrics for risk reduction. The recommended metrics may be selected according to analysis of change-to-effort ratios for the metrics.
1. A method for managing remote facilities comprising:
receiving, by a global server, security data from a plurality of assets;
for each asset of the plurality of assets:
computing, by the global server, a plurality of security metrics;
receiving, for each security metric, a change effort estimate corresponding to effort required to bring the security metric to a corresponding threshold;
aggregating the security metrics to generate an aggregate score; and
aggregating the change effort estimates to generate an aggregate change effort estimate;
computing, by the global server, change recommendations for risk reduction according to the aggregate scores and aggregate change effort estimates for the plurality of assets; and
displaying the change recommendations.
2. The method of claim 1 , wherein each of the assets has an asset size associated therewith; and
wherein displaying the change recommendations comprises displaying graphical representations of the aggregate scores using data markers plotted according to the aggregate score of each asset and the aggregate change effort estimate corresponding thereto, the data markers having a size corresponding to the asset size of the asset corresponding thereto.
3. The method of claim 2 , wherein the asset size corresponds to one or both of a value of sales generated using the asset and a number of customers associated with the asset.
4. The method of claim 3 , wherein the asset size of each asset corresponds to a product of the value of sales generated using the asset and the number of customers associated with the asset.
5. The method of claim 1 , further comprising:
receiving, by the global server, a user instruction to display information relating to a selected aggregate score of the aggregate scores; and
in response to the user instruction, displaying, by the global server, at least a portion of the plurality of security metrics corresponding to the selected aggregate score.
6. The method of claim 5 , wherein displaying, by the global server at least a portion of the plurality of security metrics corresponding to the selected aggregate score further comprises:
calculating a ratio of each security metric to a corresponding change effort estimate of the change effort estimates; and
selecting a subset of the plurality of security metrics for display according to the ratio calculated of each security metric to the corresponding change effort estimate of the change effort estimates.
7. The method of claim 1 , wherein aggregating, by the global server, the security metrics to generate an aggregate score for each asset of the plurality of assets further comprises, for each asset:
receiving a priority for each security metric of the plurality of security metrics corresponding to the asset;
calculating weighted scores according to the plurality of security metrics and the priorities; and
calculating the aggregate score according to the weighted scores.
8. The method of claim 7 , wherein aggregating, by the global server, the security metrics to generate an aggregate score for each asset of the plurality of assets further comprises, for each asset:
normalizing each of the plurality of security metrics according to a corresponding compliance threshold.
9. The method of claim 1 , wherein the change effort estimates corresponding to the security metric indicates an amount of resources required to bring the security metric into compliance with a compliance threshold corresponding thereto.
10. A system comprising one or more processors operable to execute executable data and process operational data, the one or more processors operably coupled to one another and to one or more memory devices, the one or more memory devices storing operational and executable data operable to cause the one or more processors to:
receive security data from a plurality of assets;
for each asset of the plurality of assets:
compute a plurality of security metrics;
receive, for each security metric, a change effort estimate corresponding to effort required to bring the security metric to a corresponding threshold;
aggregate the security metrics to generate an aggregate score; and
aggregate the change effort estimates to generate an aggregate change effort estimate;
compute change recommendations for risk reduction according to the aggregate scores and the aggregate change effort estimates for the plurality of assets; and
display the change recommendations.
11. The system of claim 10 , wherein each of the assets has an asset size associated therewith; and
wherein the operational and executable data are further operable to cause the one or more processors to display the change recommendations by displaying graphical representations of the aggregate scores using data markers plotted according to the aggregate score of each asset and the aggregate change effort estimate corresponding thereto, the data markers having a size corresponding to the asset size of the asset corresponding thereto.
12. The system of claim 11 , wherein the asset size corresponds to one or both of a value of sales generated using the asset and a number of customers associated with the asset.
13. The system of claim 12 , wherein the asset size of each asset corresponds to a product of the value of sales generated using the asset and the number of customers associated with the asset.
14. The method of claim 10 , wherein the operational and executable data are further operable to cause the one or more processors to:
receive a user instruction to display information relating to a selected aggregate score of the aggregate scores; and
in response to the user instruction, display at least a portion of the plurality of security metrics corresponding to the selected aggregate score.
15. The system of claim 14 , wherein the operational and executable data are further operable to cause the one or more processors to display at least a portion of the plurality of security metrics corresponding to the selected aggregate score by:
calculating a ratio of each security metric to a corresponding change effort estimate of the change effort estimates; and
selecting a subset of the plurality of security metrics for display according to the ratio calculated for each security metric to the corresponding change effort estimate of the change effort estimates.
16. The system of claim 10 , wherein the operational and executable data are further operable to cause the one or more processors to aggregate the security metrics to generate an aggregate score for each asset of the plurality of assets by, for each asset:
receiving a priority for each security metric of the plurality of security metrics corresponding to the asset;
calculating weighted scores according to the plurality of security metrics and the priorities; and
calculating the aggregate score according to the weighted scores.
17. The system of claim 16 , wherein the operational and executable data are further operable to aggregate the security metrics to generate an aggregate score for each asset of the plurality of assets by, for each asset:
normalizing each of the plurality of security metrics according to a corresponding compliance threshold.
18. The system of claim 10 , wherein the change effort estimates corresponding to the security metric indicate an amount of resources required to bring the security metric into compliance with a compliance threshold corresponding thereto.