Method, system, and/or software for finding and addressing an information/data or related system's security risk, threat, vulnerability, or similar event, in a computing device or system

A computing device-implemented method of identifying and tracking to closure a security risk, threat, or deficiency in a computer system or network, comprising the steps of:

• a) parsing, using a vulnerability module, scanned data from a computer system or network;
• b) identifying any vulnerability based on compliance with one or more predetermined criteria;
• c) reporting any vulnerability found in step b) to an administrator for remediation;
• d) tracking, using the vulnerability module, the progress of the vulnerability remediation to completion;
• e) reporting to a findings module for further remediation, if the vulnerability remediation is not completed within a preset period of time;
• and
• f) tracking, using the findings module, the progress of the remediation reported in step e) to completion.

A non-transitory computer-readable medium with instructions stored thereon, that when executed by a processing device, perform the steps comprising:

• a) parsing, using a vulnerability module, scanned data from a computer system or network;
• b) identifying any vulnerability based on compliance with one or more predetermined criteria;
• c) reporting any vulnerability found in step b) to an administrator for remediation;
• d) tracking, using the vulnerability module, the progress of the vulnerability remediation to completion;
• e) reporting to a findings module for further remediation, if the vulnerability remediation is not completed within a preset period of time;
• and
• f) tracking, using the findings module, the progress of the remediation reported in step e) to completion.

A system for identifying and tracking to closure a security risk, threat, or deficiency in a computer system or network, comprising:

• a) a first processor that runs a vulnerability module for:
• i) scanning data from a computer system or network to identify a vulnerability based on compliance with one or more predetermined criteria;
• ii) reporting the vulnerability found to an administrator for remediation;
• iii) tracking the progress of the vulnerability remediation to completion;
• and
• iv) reporting to a findings module for remediation if the vulnerability remediation is not completed within a present period of time;
• b) a second processor that runs a findings module for:
• i) tracking the progress of the vulnerability remediation received from the vulnerability module to completion;
• and
• ii) logging the received vulnerability remediation from the vulnerability module as a risk, threat, or deficiency reportable to a governmental authority;
• c) a third processor that runs a security and authorization module for:
• i) selecting, based on one or more predetermined criteria, one or more security controls applicable to a security level for the computer system or network;
• and
• ii) implementing the selected one or more security controls in the computer system or network.