Group patching recommendation and/or remediation with risk assessment

A computer-implemented method, comprising:

• identifying, by a system operatively coupled to a processor, a first patch profile from software systems associated with a computer system environment comprising a plurality of network nodes;
• identifying, by the system, a second patch profile from hardware systems associated with the plurality of network nodes of the computer system environment;
• determining, by the system, at least one patch to be applied to the computer system environment based on the first patch profile and the second patch profile;
• determining, by the system, risk classification data for the computer system environment based on a machine learning process associated with the first patch profile the second patch profile, and at least one patch risk for the at least one patch to be applied to the computer system environment, wherein the risk classification data comprises a criticality level of the computer system environment and the at least one patch risk for at least one patch to be applied to the computer system environment, wherein the criticality level of the computer system environment is based on a failure rate of the computer system environment based on the first patch profile and the second patch profile, and an impact of a failure of the computer system environment;
• and
• applying, by the system, an execution plan specifying one or more patches of the at least one patch to implement to alter the one or more portions of the computer system environment based on the-risk classification data in response to a determination that user input data associated with a computing device in communication with the system satisfies a defined criterion.

A computer program product facilitating patching recommendation and remediation with risk assessment, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to:

• identify, by the processor, a first patch profile from software systems associated with a computer system environment comprising a plurality of network nodes;
• identify, by the processor, a second patch profile from hardware systems associated with the plurality of network nodes of the computer system environment;
• determine, by the system, at least one patch to be applied to the computer system environment based on the first patch profile and the second patch profile;
• determine, by the processor, risk classification data for the computer system environment based on a machine learning process associated with the first patch profile the second patch profile, and at least one patch risk for the at least one patch to be applied to the computer system environment, wherein the risk classification data comprises a criticality level of the computer system environment and the at least one patch risk for at least one patch to be applied to the computer system environment, wherein the criticality level of the computer system environment is based on a failure rate of the computer system environment based on the first patch profile and the second patch profile, and an impact of a failure of the computer system environment;
• determine, by the processor, an execution plan specifying one or more patches of the at least one patch to implement to alter one or more portions of the computer system environment based on the risk classification data;
• and
• apply, by the processor, the execution plan to alter the one or more portions of the computer system environment in response to a determination that user input data associated with a computing device satisfies a defined criterion.