Patent ID: 7698275

Claim:
A system for managing remediations for a plurality of assets in an enterprise network, the system comprising: a remediation server configured to: receive asset information from at least one asset to be protected from the plurality of assets, the asset information including information associated with configuration settings of the at least one asset to be protected and information associated with one or more components of the at least one asset to be protected; generate an asset profile for the at least one asset to be protected, the asset profile including at least the received asset information for the at least one asset to be protected; transmit, to a content management server, a content request for content associated with one or more vulnerabilities of the plurality of assets in the enterprise network, wherein the content associated with the one or more vulnerabilities of the plurality of assets in the enterprise network is retrieved from one or more of a plurality of content providers that are external to the enterprise network; in response to the content request, receive, from the content management server, the content associated with the one or more vulnerabilities of the plurality of assets in the enterprise network; identify one or more vulnerabilities of the at least one asset to be protected by comparing the received asset information in the asset profile of the at least one asset to be protected to the received content from the content management server; identify one or more remediations for at least one of the identified one or more vulnerabilities of the at least one asset to be protected, wherein each of the one or more remediations includes at least particular content of the received content associated with the one or more vulnerabilities of the plurality of assets in the enterprise network, wherein the particular content is associated with an identified vulnerability of the at least one asset to be protected, and wherein the particular content is operable to remediate the at least one vulnerability; and generate a remediation task list associated with the at least one asset to be protected, the remediation task list including the one or more identified remediations.