Patent ID: 7657942
Filing Date: 2010-02-02
Classification: G06F,G06Q,G08B

Abstract:
1. A computer implemented method for determining a security posture of an enterprise, comprising: responsive to an occurrence of an event in an enterprise environment, populating a first database with critical operations and mapping data, wherein the mapping data maps the critical operations to at least one of the group consisting of a supporting data center, a network infrastructure, a server, an application, and a security assessment tool; populating a second database with historical data associated with the critical operations; populating a third database with access control data associated with the critical operations, wherein the access control data comprises physical access data for the critical operations and logical device access data for the critical operations; generating a security compliance view of the enterprise based on a comparison of data in the first database, second database, and third database to similar security data elements from company policies or external policies; generating a security posture view by comparing the security compliance to threat data in a fourth database; generating a threat result view by comparing threat data in the fourth database against the access control data in the third database, wherein generating the threat result view allows for determining an impact to enterprise operations if a threat is exploited; generating a resource exposure view by comparing the threat result view against connectivity data in a fifth database, wherein the resource exposure view allows for determining other resources vulnerable to a threat; determining from the security posture view whether the critical operations use a resource vulnerable to a current threat; and determining other vulnerable resources from the resource exposure view, the other vulnerable resources being impacted by vulnerabilities in the critical operations.