Threat mitigation system and method

1. A computer-implemented method, executed on a computing device, comprising:

generating, via a Security Information and Event Management system, system-defined consolidated platform information from a plurality of security-relevant subsystems within a computing platform, the plurality of security-relevant subsystems including one or more of Content Delivery Network systems, Database Activity Monitoring systems, User Behavior Analytic systems, Mobile Device Management systems, Identity and Access Management systems, and Domain Name Server systems;

obtaining the system-defined consolidated platform information for the computing platform from an independent information source;

obtaining client-defined consolidated platform information for the computing platform from a client information source;

processing at least one of the system-defined consolidated platform information and the client-defined consolidated platform information to identify one or more non-deployed security-relevant subsystems within the computing platform;

generating a list of the one or more non-deployed security-relevant subsystems, wherein generating the list of the one or more non-deployed security-relevant subsystems includes ranking and recommending the non-deployed security-relevant subsystems from the plurality of security-relevant subsystems based upon an anticipated impact of the one or more non-deployed security-relevant subsystems on the security of the computing platform; and

comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define differential consolidated platform information for the computing platform.

2. The computer-implemented method of claim 1 further comprising:

processing the system-defined consolidated platform information prior to comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define differential consolidated platform information for the computing platform.

3. The computer-implemented method of claim 2 wherein processing the system-defined consolidated platform information includes one or more of:

homogenizing the system-defined consolidated platform information prior to comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define differential consolidated platform information for the computing platform; and

normalizing the system-defined consolidated platform information prior to comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define differential consolidated platform information for the computing platform.

4. The computer-implemented method of claim 1 wherein the system-defined consolidated platform information is obtained from one or more log files defined for the computing platform.

5. The computer-implemented method of claim 1 wherein the system-defined consolidated platform information is obtained from two or more security-relevant subsystems deployed within the computing platform.

6. The computer-implemented method of claim 1 wherein the client-defined consolidated platform information is obtained from one or more client-completed questionnaires.

7. The computer-implemented method of claim 1 wherein the client-defined consolidated platform information is obtained from one or more client-deployed platform monitors.

8. A computer program product residing on a non-transitory computer readable medium having a plurality of instructions stored thereon which, when executed by a processor, cause the processor to perform operations comprising:

generating, via a Security Information and Event Management system, system-defined consolidated platform information from a plurality of security-relevant subsystems within a computing platform, the plurality of security-relevant subsystems including one or more of Content Delivery Network systems, Database Activity Monitoring systems, User Behavior Analytic systems, Mobile Device Management systems, Identity and Access Management systems, and Domain Name Server systems;

obtaining the system-defined consolidated platform information for the computing platform from an independent information source;

obtaining client-defined consolidated platform information for the computing platform from a client information source;

processing at least one of the system-defined consolidated platform information and the client-defined consolidated platform information to identify one or more non-deployed security-relevant subsystems within the computing platform;

generating a list of the one or more non-deployed security-relevant subsystems, wherein generating the list of the one or more non-deployed security-relevant subsystems includes ranking and recommending the non-deployed security-relevant subsystems from the plurality of security-relevant subsystems based upon an anticipated impact of the one or more non-deployed security-relevant subsystems on the security of the computing platform; and

comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define differential consolidated platform information for the computing platform.

9. The computer program product of claim 8 further comprising:

processing the system-defined consolidated platform information prior to comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define differential consolidated platform information for the computing platform.

10. The computer program product of claim 9 wherein processing the system-defined consolidated platform information includes one or more of:

homogenizing the system-defined consolidated platform information prior to comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define differential consolidated platform information for the computing platform; and

normalizing the system-defined consolidated platform information prior to comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define differential consolidated platform information for the computing platform.

11. The computer program product of claim 8 wherein the system-defined consolidated platform information is obtained from one or more log files defined for the computing platform.

12. The computer program product of claim 8 wherein the system-defined consolidated platform information is obtained from two or more security-relevant subsystems deployed within the computing platform.

13. The computer program product of claim 8 wherein the client-defined consolidated platform information is obtained from one or more client-completed questionnaires.

14. The computer program product of claim 8 wherein the client-defined consolidated platform information is obtained from one or more client-deployed platform monitors.

15. A computing system including a processor and memory configured to perform operations comprising:

generating, via a Security Information and Event Management system, system-defined consolidated platform information from a plurality of security-relevant subsystems within a computing platform, the plurality of security-relevant subsystems including one or more of Content Delivery Network systems, Database Activity Monitoring systems, User Behavior Analytic systems, Mobile Device Management systems, Identity and Access Management systems, and Domain Name Server systems;

obtaining the system-defined consolidated platform information for the computing platform from an independent information source;

obtaining client-defined consolidated platform information for the computing platform from a client information source;

processing at least one of the system-defined consolidated platform information and the client-defined consolidated platform information to identify one or more non-deployed security-relevant subsystems within the computing platform;

generating a list of the one or more non-deployed security-relevant subsystems, wherein generating the list of the one or more non-deployed security-relevant subsystems includes ranking and recommending the non-deployed security-relevant subsystems from the plurality of security-relevant subsystems based upon an anticipated impact of the one or more non-deployed security-relevant subsystems on the security of the computing platform; and

comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define differential consolidated platform information for the computing platform.

16. The computing system of claim 15 further comprising:

processing the system-defined consolidated platform information prior to comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define differential consolidated platform information for the computing platform.

17. The computing system of claim 16 wherein processing the system-defined consolidated platform information includes one or more of:

homogenizing the system-defined consolidated platform information prior to comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define differential consolidated platform information for the computing platform; and

normalizing the system-defined consolidated platform information prior to comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define differential consolidated platform information for the computing platform.

18. The computing system of claim 15 wherein the system-defined consolidated platform information is obtained from one or more log files defined for the computing platform.

19. The computing system of claim 15 wherein the system-defined consolidated platform information is obtained from two or more security-relevant subsystems deployed within the computing platform.

20. The computing system of claim 15 wherein the client-defined consolidated platform information is obtained from one or more client-completed questionnaires.

21. The computing system of claim 15 wherein the client-defined consolidated platform information is obtained from one or more client-deployed platform monitors.