# US 12,225,041 B2 · System and method for centralized cybersecurity configuration compliance management > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,225,041 B2 - Document ID: US12225041B2 - Status: Granted - Kind: B2 - Application number: 17/932,060 - Filed: 2022-09-14 - Published: 2024-03-14 - Granted: 2025-02-11 - Earliest claimed: 2022-09-14 - Assignees: Saudi Arabian Oil Company - Applicants: Saudi Arabian Oil Company - Inventors: Eidan K. Aleidan; Ziad I. Alomair - Web page: https://patentgrep.com/patent/US12225041B2 ## CPC - H04L 63/1433: {Vulnerability analysis} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A system and method for centralized cybersecurity configuration compliance management for an enterprise having one or more assets operate to collect external inputs including one or more of open source cybersecurity configuration baselines (OSCSCBs), vendor hardening documentation (VHD), and information from exploitation and vulnerability public databases, collect internal inputs including cybersecurity standards of the enterprise and guidelines that are specific to the assets of the enterprise, consolidate the collected external and internal inputs, and apply supervised decision tree machine learning (ML) model to generate cybersecurity configuration baseline (CSCB) controls mapping to the assets in the enterprise. ## Claims ### Claim 1 A method for centralized cybersecurity configuration compliance management for an enterprise having one or more assets, comprising: collecting external inputs including open source cybersecurity configuration baselines (OSCSCBs), vendor hardening documentation (VHD), and information from exploitation and vulnerability public databases; collecting internal inputs including cybersecurity standards of the enterprise and guidelines that are specific to the one or more assets of the enterprise; monitoring, in real-time, changes that occur to the OSCSCBs, the VHDs, the information from the exploitation and vulnerability public databases, the cybersecurity standards of the enterprise, and the guidelines that are specific to the one or more assets of the enterprise; identifying the collected external and internal inputs impacted by the changes; updating, in real-time and based on the changes, the collected external and internal inputs; consolidating the collected external and internal inputs into an up-to-date feed; and applying, into an up-to-date feed, a supervised decision tree machine learning (ML) model to generate a mapping of cybersecurity configuration baseline (CSCB) controls to the one or more assets in the enterprise. ### Claim 2 (depends on 1) The method of claim 1, further comprising: identifying relevant standards for each of different asset types in the enterprise. ### Claim 3 (depends on 1) The method of claim 1, wherein the ML model identifies a criticality of each of the one or more assets, checks a history of vulnerabilities, and identifies relevant controls from external and internal sources. ### Claim 4 (depends on 1) The method of claim 1, wherein the OSCSCBs are obtained from one or more of the Center of Information Security (CIS) Benchmarks or the US Department of Defense Security Technical Implementation Guides (STIGs). ### Claim 5 (depends on 1) The method of claim 1, wherein the mapping identifies one or more of: an open source cybersecurity configuration baseline; vendor hardening documentation; high-level cybersecurity standards; and system-specific guidelines. ### Claim 6 (depends on 1) The method of claim 1, wherein the centralized cybersecurity standards manager is further operable to maintain an inventory of different asset types in the enterprise that require a CSCB. ### Claim 7 (depends on 6) The method of claim 6, wherein the centralized cybersecurity standards manager is further operable to identity relevant standards for each of the different asset types in the enterprise. ### Claim 8 (depends on 1) The method of claim 1, wherein the mapping is based on a severity and a criticality in a network associated with the one or more assets. ### Claim 9 A system for centralized cybersecurity configuration compliance management for an enterprise having one or more assets, comprising: a memory; and a processor configured to execute instructions stored in the memory to implement a centralized cybersecurity standards manager, the centralized cybersecurity standards manager configured to cause the processors to: collect external inputs including open source cybersecurity configuration baselines (OSCSCBs), vendor hardening documentation (VHD), and information from exploitation and vulnerability public databases, collect internal inputs including cybersecurity standards of the enterprise and guidelines that are specific to the one or more assets of the enterprise, monitor, in real-time, changes that occur to the OSCSCBs, the VHDs, the information from the exploitation and vulnerability public databases, the cybersecurity standards of the enterprise, and the guidelines that are specific to the one or more assets of the enterprise; identify the collected external and internal inputs impacted by the changes; update, in real-time and based on the changes, the collected external and internal inputs; consolidate the collected external and internal inputs into an up-to-date feed, and apply, to the up-to-date feed, a supervised decision tree machine learning (ML) model to generate a mapping of cybersecurity configuration baseline (CSCB) controls to the one or more assets in the enterprise. ### Claim 10 (depends on 9) The system of claim 9, wherein the ML model identifies a criticality of each of the one or more assets, checks a history of vulnerabilities, and identifies relevant controls from external and internal sources. ### Claim 11 (depends on 9) The system of claim 9, wherein the mapping is based on a severity and a criticality in a network associated with the one or more assets. ### Claim 12 (depends on 9) The system of claim 9, wherein the OSCSCBs are obtained from one or more of the Center of Information Security (CIS) Benchmarks or the US Department of Defense Security Technical Implementation Guides (STIGs). ### Claim 13 (depends on 9) The system of claim 9, wherein the mapping identifies one or more of: an open source cybersecurity configuration baseline; vendor hardening documentation; high-level cybersecurity standards; and system-specific guidelines. ### Claim 14 (depends on 9) The system of claim 9, wherein the centralized cybersecurity standards manager is further operable to maintain an inventory of different asset types in the enterprise that require a CSCB. ### Claim 15 (depends on 14) The system of claim 14, wherein the centralized cybersecurity standards manager is further operable to identity relevant standards for each of the different asset types in the enterprise.