Patent ID: 8533841

Claim:
A computer-implemented system comprising: at least one processor programmed to act as: a compliance scoring component to evaluate rules included in a security policy according to corresponding collected values of system parameters of a computing device, a rule comprising one or more Boolean expressions comprising conditional operators and a plurality of corresponding system parameters operated on by the conditional operators such that truth of the rule depends on values of the plurality of corresponding system parameters, and to generate, based on the evaluating, a report on compliance of the computing device with the security policy, the report including a score, the score generated by the compliance scoring component based on weights of the rules, respectively; and the remediation component to determine, responsive to evaluation of the score, that the computing device is not in compliance with the security policy, and in response the remediation component analyzes rules determined not to be in compliance with the security policy and for each such rule the remediation component identifies a minimal number of changes to the corresponding constituent system parameters of such rule to place the rule in compliance with the security policy, wherein for some rules the corresponding minimal number of changes is less than the corresponding total number of system parameters in the rule.