Threat mitigation system and method

A computer program product residing on a non-transitory computer readable medium having a plurality of instructions stored thereon which, when executed by a processor, cause the processor to perform operations comprising:

• generating, via a Security Information and Event Management system, system-defined consolidated platform information from a plurality of security-relevant subsystems within a computing platform, the plurality of security-relevant subsystems including one or more of Content Delivery Network systems, Database Activity Monitoring systems, User Behavior Analytic systems, Mobile Device Management systems, Identity and Access Management systems, and Domain Name Server systems;
• obtaining the system-defined consolidated platform information for the computing platform from an independent information source, wherein the system-defined consolidated platform information defines what security-relevant subsystems are present on the computing platform;
• obtaining client-defined consolidated platform information for the computing platform from a client information source, wherein the client-defined consolidated platform information defines what security-relevant subsystems the client believes are present on the computing platform;
• presenting differential consolidated platform information for the computing platform to a third-party;
• processing at least one of the system-defined consolidated platform information and the client-defined consolidated platform information to identify one or more non-deployed security-relevant subsystems;
• and
• generating a list of the one or more non-deployed security-relevant subsystems, wherein generating the list of the one or more non-deployed security-relevant subsystems includes ranking and recommending the non-deployed security-relevant subsystems from the plurality of security-relevant subsystems within the computing platform.

A computing system including a processor and memory configured to perform operations comprising:

• generating, via a Security Information and Event Management system, system-defined consolidated platform information from a plurality of security-relevant subsystems within a computing platform, the plurality of security-relevant subsystems including one or more of Content Delivery Network systems, Database Activity Monitoring systems, User Behavior Analytic systems, Mobile Device Management systems, Identity and Access Management systems, and Domain Name Server systems;
• obtaining the system-defined consolidated platform information for the computing platform from an independent information source, wherein the system-defined consolidated platform information defines what security-relevant subsystems are present on the computing platform;
• obtaining client-defined consolidated platform information for the computing platform from a client information source, wherein the client-defined consolidated platform information defines what security-relevant subsystems the client believes are present on the computing platform;
• presenting differential consolidated platform information for the computing platform to a third-party;
• processing at least one of the system-defined consolidated platform information and the client-defined consolidated platform information to identify one or more non-deployed security-relevant subsystems;
• and
• generating a list of the one or more non-deployed security-relevant subsystems, wherein generating the list of the one or more non-deployed security-relevant subsystems includes ranking and recommending the non-deployed security-relevant subsystems from the plurality of security-relevant subsystems within the computing platform.