US 2013/0212685 A1 · NETWORk THREAT RISK ASSESSMENT TOOL

Abstract

A method, system and computer program product is disclosed that provides timely, accurate and summarized information about possible threats to information technology environments. It is a tool that looks at multiple aspects of an IT threat, including both specific (traditional) IT threats and general (non-traditional) IT threats, and rates each threat's overall potential to do harm. A matrix is created that identifies a “threat score” to allow prioritization and reaction to the threats. The matrix takes both traditional IT threats and non-traditional IT threats and normalizes them on the same scale, giving users of the matrix the ability to understand the risks of both.

Claims18

Dependent claims

A computer-implemented method of assessing a weather-related threat to an Information Technology (IT) system, the method comprising the steps of:

collecting weather data for a location of the IT system;
determining, by one or more processors, a likelihood of a predetermined type of adverse weather event occurring at the location of the IT system, based on the weather data;
determining, by one or more processors, a likelihood of a problem caused by the adverse weather event to the IT system if the type of adverse weather event occurs;
determining, by one or more processors, an impact of the problem on a business dependent on the IT system if the problem occurs;
and
determining, by one or more processors, a risk based on (a) the likelihood of the predetermined type of adverse weather event occurring, (b) the likelihood of the problem caused by the type of adverse weather event to the IT system, and (c) the impact on the problem on the business dependent on the IT system;
and
generating an electronic alert if the risk exceeds a threshold.

5 more elements

A computer program product for assessing a weather-related threat to an Information Technology (IT) system, the computer program product comprising computer-readable storage medium having computer-readable program code embodied in the medium, the computer-readable program code comprising:

computer readable program code that collects weather data for a location of the IT system;
computer readable program code that determines, by one or more processors, a likelihood of a predetermined type of adverse weather event occurring at the location of the IT system, based on the weather data;
computer readable program code that determines, by one or more processors, a likelihood of a problem caused by the adverse weather event to the IT system if the type of adverse weather event occurs;
computer readable program code that determines, by one or more processors, an impact of the problem on a business dependent on the IT system if the problem occurs;
and
computer readable program code that determines, by one or more processors, a risk based on (a) the likelihood of the predetermined type of adverse weather event occurring, (b) the likelihood of the problem caused by the type of adverse weather event to the IT system, and (c) the impact on the problem on the business dependent on the IT system;
and
computer readable program code that generates an electronic alert if the risk exceeds a threshold.

5 more elements

Dependencies are inferred from the claim text.

NETWORk THREAT RISK ASSESSMENT TOOL

Life of this patent

NETWORk THREAT RISK ASSESSMENT TOOL

Life of this patent

Abstract

Claims18