Patent ID: 8893283

Claim:
An automated enterprise compliance auditing by vulnerabilities system comprising: an enterprise asset database comprising details of assets of said enterprise; at least one compliance regulation, each of said at least one compliance regulation comprising at least one compliance control; a known asset vulnerabilities database comprising details of publicly known asset vulnerabilities; compliance control associating functionality to associate each of a set of audited assets with at least a subset of compliance controls of said at least one compliance regulation, said set of audited assets being at least a subset of said assets of said enterprise; vulnerability mapping functionality to map each compliance control of said at least one compliance regulation to a subset of said publicly known asset vulnerabilities which may potentially impact compliance of at least one of said audited assets therewith; asset scanning functionality to scan each audited asset of said set of audited assets to ascertain to which of said publicly known asset vulnerabilities said audited asset is vulnerable to; and numeric compliance score calculating functionality to, responsive to said associating, said mapping and said scanning, calculate for each of said set of audited assets, a numeric compliance score for each compliance control associated therewith, said numeric compliance score being within a range of possible numeric compliance scores.