Security for devices connected to a network

A system of providing security for a device comprising:

• at least one hardware processor configured to:
• monitor a plurality of networked devices for a security risk, wherein each networked device is associated with a corresponding security risk tolerance for initiating actions to alleviate the security risk and a corresponding remediation risk tolerance indicating a risk level associated with performance of the actions to alleviate the security risk on that networked device;
• determine the actions to alleviate the security risk and the risk level for each determined action associated with performing that determined action on the plurality of networked devices to alleviate the security risk;
• determine that a monitored security risk for one or more of the plurality of networked devices exceeds the corresponding security risk tolerance;
• determine one or more of the determined actions to alleviate the monitored security risk with the risk level from performance satisfying the corresponding remediation risk tolerance for each of the one or more networked devices, wherein determining one or more of the determined actions includes identifying at least one new action for the determined actions that subsequently becomes available and has the risk level from performance satisfying the corresponding remediation risk tolerance for at least one networked device of the one or more networked devices when the risk level from performance of the determined actions fails to satisfy the corresponding remediation risk tolerance for the at least one networked device;
• and
• initiate at the system a network service provided to the one or more networked devices to perform the determined one or more actions on each of the one or more networked devices to alleviate the monitored security risk.

A computer program product for providing security for a device from a security system, the computer program product comprising one or more computer readable storage media collectively having computer readable program code embodied therewith, the computer readable program code executable by at least one processor of the security system to cause the at least one processor to:

• monitor a plurality of networked devices for a security risk, wherein each networked device is associated with a corresponding security risk tolerance for initiating actions to alleviate the security risk and a corresponding remediation risk tolerance indicating a risk level associated with performance of the actions to alleviate the security risk on that networked device;
• determine the actions to alleviate the security risk and the risk level for each determined action associated with performing that determined action on the plurality of networked devices to alleviate the security risk;
• determine that a monitored security risk for one or more of the plurality of networked devices exceeds the corresponding security risk tolerance;
• determine one or more of the determined actions to alleviate the monitored security risk with the risk level from performance satisfying the corresponding remediation risk tolerance for each of the one or more networked devices, wherein determining one or more of the determined actions includes identifying at least one new action for the determined actions that subsequently becomes available and has the risk level from performance satisfying the corresponding remediation risk tolerance for at least one networked device of the one or more networked devices when the risk level from performance of the determined actions fails to satisfy the corresponding remediation risk tolerance for the at least one networked device;
• and
• initiate at the security system a network service provided to the one or more networked devices to perform the determined one or more actions on each of the one or more networked devices to alleviate the monitored security risk.