Threat mitigation system and method
A computer-implemented method, computer program product and computing system for: obtaining system-defined consolidated platform information for a computing platform from an independent information source; obtaining client-defined consolidated platform information for the computing platform from a client information source; and presenting differential consolidated platform information for the computing platform to the third-party.
1. A computer-implemented method, executed on a computing device, comprising:
generating, via a Security Information and Event Management system, system-defined consolidated platform information from a plurality of security-relevant subsystems within a computing platform, the plurality of security-relevant subsystems including one or more of Content Delivery Network systems, Database Activity Monitoring systems, User Behavior Analytic systems, Mobile Device Management systems, Identity and Access Management systems, and Domain Name Server systems;
obtaining the system-defined consolidated platform information for the computing platform from an independent information source, wherein the system-defined consolidated platform information defines what security-relevant subsystems are present on the computing platform;
obtaining client-defined consolidated platform information for the computing platform from a client information source, wherein the client-defined consolidated platform information defines what security-relevant subsystems the client believes are present on the computing platform;
presenting differential consolidated platform information for the computing platform to a third-party;
processing at least one of the system-defined consolidated platform information and the client-defined consolidated platform information to identify one or more non-deployed security-relevant subsystems; and
generating a list of the one or more non-deployed security-relevant subsystems, wherein generating the list of the one or more non-deployed security-relevant subsystems includes ranking and recommending the non-deployed security-relevant subsystems from the plurality of security-relevant subsystems within the computing platform.
2. The computer-implemented method of claim 1 further comprising:
comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define the differential consolidated platform information for the computing platform.
3. The computer-implemented method of claim 2 further comprising:
processing the system-defined consolidated platform information prior to comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define differential consolidated platform information for the computing platform.
4. The computer-implemented method of claim 1 wherein the system-defined consolidated platform information is obtained from one or more log files defined for the computing platform.
5. The computer-implemented method of claim 1 wherein the system-defined consolidated platform information is obtained from two or more security-relevant subsystems deployed within the computing platform.
6. The computer-implemented method of claim 1 wherein the client-defined consolidated platform information is obtained from one or more client-completed questionnaires.
7. The computer-implemented method of claim 1 wherein the client-defined consolidated platform information is obtained from one or more client-deployed platform monitors.
8. A computer program product residing on a non-transitory computer readable medium having a plurality of instructions stored thereon which, when executed by a processor, cause the processor to perform operations comprising:
generating, via a Security Information and Event Management system, system-defined consolidated platform information from a plurality of security-relevant subsystems within a computing platform, the plurality of security-relevant subsystems including one or more of Content Delivery Network systems, Database Activity Monitoring systems, User Behavior Analytic systems, Mobile Device Management systems, Identity and Access Management systems, and Domain Name Server systems;
obtaining the system-defined consolidated platform information for the computing platform from an independent information source, wherein the system-defined consolidated platform information defines what security-relevant subsystems are present on the computing platform;
obtaining client-defined consolidated platform information for the computing platform from a client information source, wherein the client-defined consolidated platform information defines what security-relevant subsystems the client believes are present on the computing platform;
presenting differential consolidated platform information for the computing platform to a third-party;
processing at least one of the system-defined consolidated platform information and the client-defined consolidated platform information to identify one or more non-deployed security-relevant subsystems; and
generating a list of the one or more non-deployed security-relevant subsystems, wherein generating the list of the one or more non-deployed security-relevant subsystems includes ranking and recommending the non-deployed security-relevant subsystems from the plurality of security-relevant subsystems within the computing platform.
9. The computer program product of claim 8 further comprising:
comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define the differential consolidated platform information for the computing platform.
10. The computer program product of claim 9 further comprising:
processing the system-defined consolidated platform information prior to comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define differential consolidated platform information for the computing platform.
11. The computer program product of claim 8 wherein the system-defined consolidated platform information is obtained from one or more log files defined for the computing platform.
12. The computer program product of claim 8 wherein the system-defined consolidated platform information is obtained from two or more security-relevant subsystems deployed within the computing platform.
13. The computer program product of claim 8 wherein the client-defined consolidated platform information is obtained from one or more client-completed questionnaires.
14. The computer program product of claim 8 wherein the client-defined consolidated platform information is obtained from one or more client-deployed platform monitors.
15. A computing system including a processor and memory configured to perform operations comprising:
generating, via a Security Information and Event Management system, system-defined consolidated platform information from a plurality of security-relevant subsystems within a computing platform, the plurality of security-relevant subsystems including one or more of Content Delivery Network systems, Database Activity Monitoring systems, User Behavior Analytic systems, Mobile Device Management systems, Identity and Access Management systems, and Domain Name Server systems;
obtaining the system-defined consolidated platform information for the computing platform from an independent information source, wherein the system-defined consolidated platform information defines what security-relevant subsystems are present on the computing platform;
obtaining client-defined consolidated platform information for the computing platform from a client information source, wherein the client-defined consolidated platform information defines what security-relevant subsystems the client believes are present on the computing platform;
presenting differential consolidated platform information for the computing platform to a third-party;
processing at least one of the system-defined consolidated platform information and the client-defined consolidated platform information to identify one or more non-deployed security-relevant subsystems; and
generating a list of the one or more non-deployed security-relevant subsystems, wherein generating the list of the one or more non-deployed security-relevant subsystems includes ranking and recommending the non-deployed security-relevant subsystems from the plurality of security-relevant subsystems within the computing platform.
16. The computing system of claim 15 further comprising:
comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define the differential consolidated platform information for the computing platform.
17. The computing system of claim 16 further comprising:
processing the system-defined consolidated platform information prior to comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define differential consolidated platform information for the computing platform.
18. The computing system of claim 15 wherein the system-defined consolidated platform information is obtained from one or more log files defined for the computing platform.
19. The computing system of claim 15 wherein the system-defined consolidated platform information is obtained from two or more security-relevant subsystems deployed within the computing platform.
20. The computing system of claim 15 wherein the client-defined consolidated platform information is obtained from one or more client-completed questionnaires.
21. The computing system of claim 15 wherein the client-defined consolidated platform information is obtained from one or more client-deployed platform monitors.