System and method for centralized cybersecurity configuration compliance management

A system for centralized cybersecurity configuration compliance management for an enterprise having one or more assets, comprising:

• a memory;
• and
• a processor configured to execute instructions stored in the memory to implement a centralized cybersecurity standards manager, the centralized cybersecurity standards manager configured to cause the processors to:
• collect external inputs including open source cybersecurity configuration baselines (OSCSCBs), vendor hardening documentation (VHD), and information from exploitation and vulnerability public databases,
• collect internal inputs including cybersecurity standards of the enterprise and guidelines that are specific to the one or more assets of the enterprise,
• monitor, in real-time, changes that occur to the OSCSCBs, the VHDs, the information from the exploitation and vulnerability public databases, the cybersecurity standards of the enterprise, and the guidelines that are specific to the one or more assets of the enterprise;
• identify the collected external and internal inputs impacted by the changes;
• update, in real-time and based on the changes, the collected external and internal inputs;
• consolidate the collected external and internal inputs into an up-to-date feed, and
• apply, to the up-to-date feed, a supervised decision tree machine learning (ML) model to generate a mapping of cybersecurity configuration baseline (CSCB) controls to the one or more assets in the enterprise.