Integrated resource landscape system
The invention relates to a resource landscape system that allows users to identify issues with elements within the organization and implement changes to the elements utilizing a relational database that utilizes nodes for defining the elements and relationships between the elements. The resource landscape system and applications therein provide a holistic inventory of resources, threat vectors, controls, metrics, policies, rules, and/or the like. The resource landscape system may be implemented through one or more interfaces that allows users to view cross-references of the elements, identify the priority of the elements using the crossed-references, and/or identify element issues in the elements of the organization that could results in threats to the organization. Moreover, the invention allows for receiving changes to one or more of the elements and automatically updating the cross-references of the elements, the priority of the elements, and/or the element issues.
1. An integrated resource landscape system for remediating threats, the system comprising:
one or more memory components having computer readable code stored thereon; and
one or more processing components operatively coupled to the one or more memory components, wherein the one or more processing components are configured to execute the computer readable code to:
access a resource inventory of resources within an organization;
access a threat vector inventory of threat vectors within the organization;
cross reference the resources with the threat vectors to define threat points within a threat point matrix;
access one or more element inventories for elements comprising at least controls, metrics, policies, and rules for operation of threat points,
cross reference the threat points with the elements to define one or more element matrices;
determine priorities for the threat points based on the threat points and the one or more element matrices;
display to a user the one or more element matrices within one or more graphical interfaces illustrating the priorities with respect to the threat points and the elements, including displaying to the user the threat points within the one or more graphical interfaces illustrating the priorities with respect to the threat points alone and integrated with the controls, the metrics, the policies, and the rules, wherein the display allows navigation of various elements for connection identification of threats for the resources within an organization;
receive a change to at least one element of the elements, including receiving a change to a configuration of one of the resources, wherein the change comprises at least users that can access the resource, ability of the resource to perform a task, and other resources to which the resource is connected;
determine an effect of the change on the threat points within the threat point matrix;
receive an indication from the user that the effect of the change is acceptable; and
implement the change to a configuration of one of the resources;
access a graphical relational database that stores nodes for relationships between the elements, wherein the graphical relational database illustrates the relationships between the resources, the threat vectors, the controls, the metrics, the policies, and the rules;
determine the nodes affected by the change to the at least one element;
identify other elements associated with the nodes within the graphical relational database;
determine updated priorities for the threat points based on the nodes affected by the change to the at least one of the elements; and
display to the user the one or more element matrices within the one or more graphical interfaces illustrating the updated priorities with respect to the threat points and the elements.
2. The system of claim 1 , wherein the one or more processing components are configured to execute the computer readable code to:
access a control inventory for the controls within the organization that mitigate the threat points;
define an element matrix based on the cross reference of the controls with the threat points;
determine the priorities for the threat points based on the controls; and
display to the user the element matrix within the one or more graphical interfaces illustrating the priorities with respect to the threat points and the controls.
3. The system of claim 1 , wherein the one or more processing components are configured to execute the computer readable code to:
access a metrics inventory for the metrics within the organization that indicate how the threat points are measured;
cross reference the metrics with the threat points to define an element matrix;
determine the priorities for the threat points based on the metrics; and
display to the user the element matrix within the one or more graphical interfaces illustrating the priorities with respect to the threat points and the metrics.
4. The system of claim 1 , wherein the one or more processing components are configured to execute the computer readable code to:
access a policies inventory for the policies within the organization that indicate operation of the threat points;
cross reference the policies with the threat points to define an element matrix;
determine the priorities for the threat points based on the policies; and
display to the user the element matrix within the one or more graphical interfaces illustrating the priorities with respect to the threat points and the policies.
5. The system of claim 1 , wherein the one or more processing components are configured to execute the computer readable code to:
access a rules inventory for the rules outside the organization that indicate operation of the threat points;
cross reference the rules with the threat points to define an element matrix;
determine the priorities for the threat points based on the rules; and
display to the user the element matrix within the one or more graphical interfaces illustrating the priorities with respect to the threat points and the rules.
6. The system of claim 1 , wherein the one or more element matrices provide a representation of a threat level for the threat points and the elements, and wherein the threat level of the threat points diminishes within the one or more element matrices farther from an origin.
7. The system of claim 1 , wherein the resource inventory is structured based on individual resources and resource classes to which each individual resource belongs.
8. A computer implemented method for remediating threats using an integrated resource landscape system, the method comprising:
accessing, by one or more processor components, a resource inventory of resources within an organization;
accessing, by the one or more processor components, a threat vector inventory of threat vectors within the organization;
cross referencing, by the one or more processor components, the resources with the threat vectors to define threat points within a threat point matrix; and
accessing, by the one or more processor components, one or more element inventories for elements comprising at least controls, metrics, policies, and rules for operation of threat points,
cross referencing, by the one or more processor components, the threat points with the elements to define one or more element matrices;
determining, by the one or more processor components, priorities for the threat points based on the threat points and the one or more element matrices;
displaying, by the one or more processor components, to a user the one or more element matrices within the one or more graphical interfaces illustrating the priorities with respect to the threat points and the elements, including displaying, to the user the threat points within one or more graphical interfaces illustrating the priorities with respect to the threat points alone and integrated with controls, metrics, policies, and rules, wherein the display allows navigation of various elements for connection identification of threats for the resources within an organization;
receiving, by the one or more processor components, a change to at least one element of the elements, including receiving a change to a configuration of one of the resources, wherein the change comprises at least users that can access the resource, ability of the resource to perform a task, and other resources to which the resource is connected;
determining, by the one or more processor components, an effect of the change on the threat points within the threat point matrix;
receiving, by the one or more processor components, an indication from the user that the effect of the change is acceptable; and
implementing, by the one or more processor components, the change to a configuration of one of the resources;
accessing, by the one or more processor components, a graphical relational database that stores nodes for relationships between the elements, wherein the graphical relational database illustrates the relationships between the resources, the threat vectors, the controls, the metrics, the policies, and the rules;
determining, by the one or more processor components, the nodes affected by the change to the at least one element;
identifying, by the one or more processor components, other elements associated with the nodes within the graphical relational database;
determining, by the one or more processor components, updated priorities for the threat points based on the nodes affected by the change to the at least one of the elements; and
displaying, by the one or more processor components, to the user the one or more element matrices within the one or more graphical interfaces illustrating the updated priorities with respect to the threat points and the elements.
9. The method of claim 8 , further comprising:
accessing, by the one or more processing components, a control inventory for the controls within the organization that mitigate the threat points;
defining an element matrix based on the cross referencing, by the one or more processing components, of the controls with the threat points;
determining, by the one or more processing components, the priorities for the threat points based on the controls; and
displaying, by the one or more processing components, to the user the element matrix within the one or more graphical interfaces illustrating the priorities with respect to the threat points and the controls.
10. The method of claim 8 , further comprising:
accessing, by the one or more processing components, a metrics inventory for the metrics within the organization that indicate how the threat points are measured;
cross referencing, by the one or more processing components, the metrics with the threat points to define an element matrix;
determining, by the one or more processing components, the priorities for the threat points based on the metrics; and
displaying, by the one or more processing components, to the user the element matrix within the one or more graphical interfaces illustrating the priorities with respect to the threat points and the metrics.
11. The method of claim 8 , further comprising:
accessing, by the one or more processing components, a policies inventory for the policies within the organization that indicate operation of the threat points;
cross referencing, by the one or more processing components, the policies with the threat points to define an element matrix;
determining, by the one or more processing components, the priorities for the threat points based on the policies; and
displaying, by the one or more processing components, to the user the element matrix within the one or more graphical interfaces illustrating the priorities with respect to the threat points and the policies.
12. The method of claim 8 , further comprising:
accessing, by the one or more processing components, a rules inventory for the rules outside the organization that indicate operation of the threat points;
cross referencing, by the one or more processing components, the rules with the threat points to define an element matrix;
determining, by the one or more processing components, the priorities for the threat points based on the rules; and
displaying, by the one or more processing components, to the user the element matrix within the one or more graphical interfaces illustrating the priorities with respect to the threat points and the rules.
13. The method of claim 8 , wherein the one or more element matrices provide a representation of a threat level for the threat points and the elements, and wherein the threat level of the threat points diminishes within the one or more element matrices farther from an origin.
14. The method of claim 8 , wherein the resource inventory is structured based on individual resources and resource classes to which each individual resource belongs.