Controlled delivery and assessing of security vulnerabilities
A method for providing security vulnerability information is provided. The method may include checking for the security vulnerability information product supplier servers. The method may further include sending alerts to a security vulnerability administrator associated with a client environment. Additionally, the method may include performing a security check on the security vulnerability administrator to authorize the security vulnerability administrator to receive the security vulnerability information. The method may also include authenticating customers associated with the client environment to authorize the customers to receive the security vulnerability information. The method may further include prompting the authorized security vulnerability administrator to acknowledge an information confidentiality reminder. The method may also include sending an audit record to the product supplier server. The method may further include presenting the security vulnerability information to the authorized security vulnerability administrator and the authorized customers associated with the client environment.
1. A computer system for providing a plurality of security vulnerability information, the computer system comprising:
one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage devices, and program instructions stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, wherein the computer system is capable of performing a method comprising:
checking for the plurality of security vulnerability information on at least one product supplier server, wherein the plurality of security vulnerability information comprises at least one security installation patch, and wherein the at least one security installation patch resolves at least one security integrity issue selected from a group comprising at least one of a malware, a configuration problem, a product inventory and a maintenance level;
in response to finding the plurality of security vulnerability information on the at least one product supplier server, sending at least one alert to at least one security vulnerability administrator (SVA) associated with a client environment, wherein the at least one alert is selected from a group comprising at least one of an email alert and a pop-up notification;
performing at least one security check on the at least one SVA to authorize the at least one security vulnerability administrator to receive the plurality of security vulnerability information, wherein performing the at least one security check on the at least one SVA further comprises at least one of prompting the at least one SVA to enter at least one password, and verifying a plurality of data associated with the at least one SVA via a digital certificate;
authenticating at least one customer associated with the client environment to authorize the at least one customer to receive the plurality of security vulnerability information, wherein authenticating the at least one customer associated with the client environment further comprises verifying at least one customer licensed product certificate;
prompting the authorized at least one security vulnerability administrator to acknowledge an information confidentiality reminder to receive the plurality of security vulnerability information, wherein the information confidentiality reminder comprises at least one sharing restriction notification associated with the plurality of security vulnerability information;
in response to the authorized at least one security vulnerability administrator acknowledging the information confidentiality reminder, sending an audit record to the at least one product supplier server; and
presenting the plurality of security vulnerability information to the authorized at least one security vulnerability administrator and the authorized at least one customer associated with the client environment.