Patent ID: 8819820

Claim:
A computer program product for matching and performing gap analysis of security capabilities of a computer system comprising: at least one computer readable storage memory device; a security capability reference model data structure containing indications of available security capabilities of a computer system under analysis, wherein each capability is classified in a formal security capability reference model with a mean having a set of attributes and a goal; first program instructions for determining by a processor utilization levels of security capabilities of the computer system under analysis in a currently deployed state; second program instructions for matching by a processor the utilization levels with the available security capabilities defined in the data structure; third program instructions for determining by a processor one or more gaps between the utilization levels and a corresponding security reference model goal, wherein each gap corresponds to an unmatched utilization level with an available security capability; fourth program instructions for performing by a processor a correction analysis to determine one or more potential corrective actions; and fifth program instructions for producing by a processor a report of the gaps, and wherein each reported gap corresponds to at least one available security capability of the system under analysis which is available but used, available and unused, or unavailable, and wherein the report includes the one or more potential corrective actions to correct the identified one or more gaps; wherein the security capability reference model data structure, and the first, second, third, and fourth program instructions are stored in or on the at least one computer readable storage memory device.