Security service orchestration function for commercial security service level agreements

A computing device comprising:

• processing circuitry;
• and
• memory coupled with the processing circuitry, wherein the memory includes instructions that when executed by the processing circuitry causes the computing device to implement a security service orchestration function, SSOF, wherein the SSOF is a primary security orchestration function that communicates between a communication service provider, CSP, and a plurality of enterprises and that interacts with supporting security management functions within a communications infrastructure of the CSP, the computing device configured to:
• receive a S-SLA request from one or more of the plurality of enterprises, wherein each S-SLA request comprises a plurality of requirements, and the S-SLA request from each one of the one or more of the plurality of enterprises comprises a plurality of optional information elements or objects and mandatory information elements or objects, wherein the plurality of optional information elements or objects comprises:
• confidentiality attributes, target integrity attributes, target authentication attributes, target availability attributes, target non-repudiation attributes, target isolation attributes, target data sovereignty attributes, validity condition, temporal validity condition, subscription of S-SLA compliance monitoring events, allowed internet protocol domains, and extra data protection controls, and wherein the mandatory information elements or objects comprise a target enterprise identifier;
• negotiate security attributes and required levels of the security attributes between the enterprises in a communications network of the CSP;
• convert each S-SLA request into a unique S-SLA corresponding to the plurality of requirements in the S-SLA request from an associated enterprise, wherein each unique S-SLA comprises security attributes that the CSP provides to the enterprises;
• offer the unique S-SLA to the associated enterprise for each enterprise that submitted the S-SLA request;
• and
• receive a response from each enterprise, wherein the response from each enterprise comprises an acknowledgement of the unique S-SLA or a decline of the unique S-SLA including a non-repudiation signature of acknowledgement or declining.