Information technology security assessment model for process flows and associated automated remediation

A computer-implemented method for defining security vulnerabilities of computer-related processes and implementing automated remediation, the method executed by one or more computing device processors and comprising:

• receiving first data from a plurality of disparate data sources;
• identifying, from the first data, critical vulnerability assets associated with a selected one of a plurality of computer-related processes;
• implementing one or more machine learning algorithms and a process-related control framework to identify a plurality of controls for a selected one of the computer-related processes based at least on the critical vulnerability assets;
• generating a vulnerability assessment specific to the selected computer-related process including the plurality of controls;
• implementing one or more threat modeling algorithms to define vulnerabilities for the selected one of the computer-related processes;
• determining one or more network tasks for optimizing a distributed computing network based on the defined vulnerabilities;
• and
• in response to determining the one or more network tasks, executing at least one of the tasks to optimize the distributed computing network.

A computer program product comprising:

• a non-transitory computer-readable medium comprising:
• a first set of codes for causing a computer to receive first data from a plurality of disparate data sources;
• a second set of codes for causing a computer to identify, from the first data, critical vulnerability assets associated with a selected one of a plurality of computer-related processes;
• a third set of codes for causing a computer to implement one or more machine learning algorithms and a process-related control framework to identify a plurality of controls for a selected one of the computer-related processes based at least on the critical vulnerability assets;
• a fourth set of codes for causing a computer to generate a vulnerability assessment specific to the selected computer-related process including the plurality of controls;
• a fifth set of codes for causing a computer to implement one or more threat modeling algorithms to define vulnerabilities for the selected one of the computer-related processes;
• a sixth set of codes for causing a computer to determine one or more network tasks for optimizing a distributed computing network based on the defined vulnerabilities;
• and
• a seventh set of codes for causing a computer to, in response to determining the one or more network tasks, executing at least one of the tasks to optimize the distributed computing network.