Information technology stack security control configuration

A system comprising:

• a processor;
• and
• a non-transitory storage medium storing instructions executable on the processor to:
• receive input information relating to a security level for an information technology (IT) stack comprising a plurality of layers including a hardware layer and a software layer, wherein the input information is technology and product agnostic, and wherein the input information comprises information relating to a compliance specification;
• discover IT components of the plurality of layers of the IT stack;
• search, based on the input information and the discovered IT components, a knowledge base that maps different security levels for respective IT components to configuration instructions relating to security controls, wherein the search provides selected configuration instructions retrieved from the knowledge base, and wherein the knowledge base further maps different compliance specifications for the respective IT components to the configuration instructions relating to the security controls;
• and
• send, through an interface, the selected configuration instructions to the IT components of the IT stack to configure the IT components of the IT stack with respective security controls corresponding to the selected configuration instructions.

A method performed by a system comprising a hardware processor, comprising:

• receiving user input information relating to a security level for an information technology (IT) stack comprising a plurality of layers including a hardware layer, a firmware layer, and a software layer, wherein the user input information is technology and product agnostic, the user input information further comprising information of a compliance specification;
• discovering components of the plurality of layers of the IT stack;
• accessing a knowledge base that maps the security level, the information of the compliance specification, and the discovered components to configuration instructions relating to security controls, wherein the security level is mapped by the knowledge base to a first security control that conflicts with a second security control mapped by the knowledge base to the compliance specification;
• resolve the conflict between the first security control and the second security control according to a criterion, wherein the resolving of the conflict produces a resulting security control;
• and
• configuring the IT stack with the resulting security control using the configuration instructions.

A non-transitory machine-readable storage medium comprising instructions that upon execution cause a system to:

• receive input information relating to a security level for an information technology (IT) stack comprising a plurality of layers including a hardware layer and a software layer, wherein the input information is technology and product agnostic;
• discover components of the plurality of layers of the IT stack;
• access a knowledge base that maps the security level and the discovered components to configuration instructions relating to security controls;
• identify a conflict between a first security control for a first component of the components of the plurality of layers of the IT stack mapped by the knowledge base to the security level, and a second security control for the first component mapped by the knowledge base to a compliance specification;
• and
• resolve the conflict between the first security control and the second security control based on a criterion, wherein the resolving of the conflict produces a resulting security control that is used to configure the IT stack;
• and
• configure the IT stack with the security controls using the configuration instructions, the configuring of the IT stack comprising sending the configuration instructions to the components of the IT stack.

A system comprising:

• a processor;
• and
• a non-transitory storage medium storing instructions executable on the processor to:
• receive input information relating to a security level for an information technology (IT) stack comprising a plurality of layers including a hardware layer and a software layer, wherein the input information is technology and product agnostic, and wherein the input information comprises information relating to an industry vertical of the IT stack;
• discover IT components of the plurality of layers of the IT stack;
• search, based on the input information and the discovered IT components, a knowledge base that maps different security levels for respective IT components to configuration instructions relating to security controls, wherein the search provides selected configuration instructions retrieved from the knowledge base, and wherein the knowledge base further maps different industry verticals for the respective IT components to the configuration instructions relating to the security controls;
• and
• send, through an interface, the selected configuration instructions to the IT components of the IT stack to configure the IT components of the IT stack with respective security controls corresponding to the selected configuration instructions.