System for processing content in scan and remediation processing

A compliance system, comprising:

• at least one computer with at least one processor and memory coupled to a computing environment;
• a datastore storing content coupled to the computing environment;
• a compliance module executing in memory of the at least one computer, the compliance module comprising program code that when executed by the at least one processor causes the at least one computer to:
• receive a scan request or a remediation request,
• load, from the datastore, content referencing one or more controls in the computing environment and for each control referenced, including one or more of a compliance value defining a current setting of a control in the computing environment for which the control is compliant with a policy enacted on the computing environment, a remediation value defining a new setting of the control in the computing environment for which the current setting of the control is changed to, and an ignore switch indicating whether the current setting of the control is ignored,
• determine that the received request is a scan request,
• scan the computing environment to determine all controls in the computing environment and also the current setting for each control,
• determine a subset of controls from all controls, where each control in the subset of controls is out of compliance, an out of compliance state is not to be ignored, and a corresponding remediation value is defined in the loaded content for each control,
• for each control in the determined subset of control, determine and capture information regarding each control, the information including one or more of the current setting, the compliance value, the remediation value, whether the control is out of compliance, and whether or not there is the ignore switch, and
• store the subset of controls and the captured information regarding each control.

A computer program product for processing content in a computing environment, the computer program product comprising:

• a non-transitory computer readable storage medium having computer readable program code embodied therewith that when executed by a processor of a computer causes the computer to:
• receive a scan request or a remediation request;
• load, from a datastore, content referencing one or more controls in the computing environment and for each control referenced, including one or more of a compliance value defining a current setting of a control in the computing environment for which the control is compliant with a policy enacted on the computing environment, a remediation value defining a new setting of the control in the computing environment for which the current setting of the control is changed to, and an ignore switch indicating whether the current setting of the control is ignored;
• determine that the received request is a scan request;
• scan the computing environment to determine all controls in the computing environment and also the current setting for each control upon determining that the received request is the scan request;
• determine a subset of controls from all controls, where each control in the subset of controls is out of compliance, an out of compliance state is not to be ignored, and a corresponding remediation value is defined in the loaded content for each control;
• for each control in the determined subset of control, determine and capture information regarding each control, the information including one or more of the current setting, the compliance value, the remediation value, whether the control is out of compliance, and whether or not there is the ignore switch;
• and,
• store the subset of controls and the captured information regarding each control.