Flaw Remediation Management

摘要

A flaw remediation management server (herein ‘flaw server’) receives flaw data from a plurality of flaw sources. Further, the flaw server analyzes and correlates the flaw data to generate one flaw record per flaw for each asset. Furthermore, the flaw server prioritizes the flaw records and stores them in a flaw database along with additional information associated with each flaw record. Then, the flaw server groups the flaw records of the flaw database into one or more work items based on grouping criteria. Further, the flaw server calculates and assigns a work priority score to each work item. Responsively, the flaw server generates instructions to create, update, and/or cancel a remediation ticket for each work item based on the work priority score. Furthermore, the flaw server generates interactive flaw remediation reports and/or dashboards based on the flaw records for presentation to a user.

主权项

1) A flaw remediation management system comprising:
a plurality of disparate flaw identification sources, each flaw identification source configured to monitor and identify flaws in one or more assets associated with an information technology system; a computer network; and a flaw remediation management server computer communicatively coupled to the plurality of disparate flaw identification sources via the computer network, the flaw remediation management server computer configured to:
receive flaw data from the plurality of disparate flaw identification sources, the flaw data representative of the flaws associated with the one or more assets;for each asset of the one or more assets, generate one flaw record per flaw of the respective asset by correlating the flaw data across each flaw identification source of the plurality of disparate flaw identification sources;group the generated flaw records of the one or more assets into work items based on grouping criteria, each work item comprising one or more of the generated flaw records of the one or more assets;for each of the work items,
calculate a work priority score, andgenerate and manage a flaw remediation ticket based on the work priority score; andgenerate and output an interactive flaw remediation management report based on the generated flaw records.