Controlled delivery and assessing of security vulnerabilities
A method for providing security vulnerability information is provided. The method may include checking for the security vulnerability information product supplier servers. The method may further include sending alerts to a security vulnerability administrator associated with a client environment. Additionally, the method may include performing a security check on the security vulnerability administrator to authorize the security vulnerability administrator to receive the security vulnerability information. The method may also include authenticating customers associated with the client environment to authorize the customers to receive the security vulnerability information. The method may further include prompting the authorized security vulnerability administrator to acknowledge an information confidentiality reminder. The method may also include sending an audit record to the product supplier server. The method may further include presenting the security vulnerability information to the authorized security vulnerability administrator and the authorized customers associated with the client environment.
1. A computer program product for providing a plurality of security vulnerability information, the computer program product comprising:
one or more computer-readable storage devices and program instructions stored on at least one of the one or more tangible storage devices, the program instructions executable by a processor, the program instructions comprising:
program instructions to check for the plurality of security vulnerability information on at least one product supplier server, wherein the plurality of security vulnerability information comprises at least one security installation patch, and wherein the at least one security installation patch resolves at least one security integrity issue selected from a group comprising at least one of a malware, a configuration problem, a product inventory and a maintenance level;
program instructions to, in response to finding the plurality of security vulnerability information on the at least one product supplier server, send at least one alert to at least one security vulnerability administrator (SVA) associated with a client environment, wherein the at least one alert is selected from a group comprising at least one of an email alert and a pop-up notification;
program instructions to perform at least one security check on the at least one SVA to authorize the at least one security vulnerability administrator to receive the plurality of security vulnerability information, wherein performing the at least one security check on the at least one SVA further comprises at least one of prompting the at least one SVA to enter at least one password, and verifying a plurality of data associated with the at least one SVA via a digital certificate;
program instructions to authenticate at least one customer associated with the client environment to authorize the at least one customer to receive the plurality of security vulnerability information, wherein authenticating the at least one customer associated with the client environment further comprises verifying at least one customer licensed product certificate;
program instructions to prompt the authorized at least one security vulnerability administrator to acknowledge an information confidentiality reminder to receive the plurality of security vulnerability information, wherein the information confidentiality reminder comprises at least one sharing restriction notification associated with the plurality of security vulnerability information;
program instructions to, in response to the authorized at least one security vulnerability administrator acknowledging the information confidentiality reminder, send an audit record to the at least one product supplier server; and
program instructions to present the plurality of security vulnerability information to the authorized at least one security vulnerability administrator and the authorized at least one customer associated with the client environment.