Patent ID: 9712555
Date: 2017-07-18
CPC Classifications: G06F,H04L

Claim:
1. A method of operating an advisement system to provide default security actions in a computing environment, the method comprising: in a processing system of the advisement system, identifying a security incident for an asset in the computing environment, wherein the computing environment comprises a plurality of computing assets; in response to identifying the security incident, identifying enrichment information about the security incident from one or more databases; determining a rule set for the security incident based on the enrichment information; identifying an action response for the security incident based on the rule set; identifying a time period for the action response to be implanted in the computing environment; initiating implementation of the action response for the security incident in the computing environment; identifying one or more action recommendations for an administrator based on the rule set; providing the one or more action recommendations to the administrator of the computing environment; using the identified time period as a defined time period for which the administrator has to respond to the one or more action recommendations; determining whether a selection of the one or more action recommendations is provided by the administrator within the defined time period; if a selection is provided by the administrator within the defined time period, initiating implementation of the selection in the computing environment; and if a selection is not provided by the administrator within the defined time period, initiating a supplemental automated action in the computing environment for the security incident.