Threat mitigation system and method

A computer program product residing on a non-transitory computer readable medium having a plurality of instructions stored thereon which, when executed by a processor, cause the processor to perform operations comprising:

• generating, via a Security Information and Event Management system, consolidated platform information from a plurality of security-relevant subsystems within a computing platform, the plurality of security-relevant subsystems including one or more of Content Delivery Network systems, Database Activity Monitoring systems, User Behavior Analytic systems, Mobile Device Management systems, Identity and Access Management systems, and Domain Name Server systems, wherein generating the consolidated platform information from the plurality of security-relevant subsystems within the computing platform includes establishing connectivity with the plurality of security-relevant subsystems via one or more application programmable interface (API) gateways;
• obtaining the consolidated platform information to identify current security-relevant capabilities for the computing platform, wherein the current security-relevant capabilities for the computing platform indicate the capabilities of the computing platform to counter computer threats;
• determining comparative platform information that identifies security-relevant capabilities for a comparative platform, wherein the comparative platform concerns one or more vendor customers;
• generating comparison information that compares the current security-relevant capabilities of the computing platform to the comparative platform information of the comparative platform to identify a threat context indicator;
• and
• displaying the comparison information to user, wherein the comparison information includes a current threat context score for a client and a threat context score for the one or more vendor customers.

A computing system including a processor and memory configured to perform operations comprising:

• generating, via a Security Information and Event Management system, consolidated platform information from a plurality of security-relevant subsystems within a computing platform, the plurality of security-relevant subsystems including one or more of Content Delivery Network systems, Database Activity Monitoring systems, User Behavior Analytic systems, Mobile Device Management systems, Identity and Access Management systems, and Domain Name Server systems, wherein generating the consolidated platform information from the plurality of security-relevant subsystems within the computing platform includes establishing connectivity with the plurality of security-relevant subsystems via one or more application programmable interface (API) gateways;
• obtaining the consolidated platform information to identify current security-relevant capabilities for the computing platform, wherein the current security-relevant capabilities for the computing platform indicate the capabilities of the computing platform to counter computer threats;
• determining comparative platform information that identifies security-relevant capabilities for a comparative platform, wherein the comparative platform concerns one or more vendor customers;
• generating comparison information that compares the current security-relevant capabilities of the computing platform to the comparative platform information of the comparative platform to identify a threat context indicator;
• and
• displaying the comparison information to user, wherein the comparison information includes a current threat context score for a client and a threat context score for the one or more vendor customers.