Method and system for ensuring compliance of computing systems

A system for analyzing computing devices for properties of at least one computer software comprised in at least one computing system, the system comprising:

• a processor;
• a memory or a data storage that stores data and a program;
• a communication device that communicates with the at least one of the computing systems;
• and
• a user interface that receives a user entry, wherein
• when the program is executed by the processor, the processor is caused to load, from a data storage, a memory, or via the communication device, or via a user entry through the user interface, a list of at least one vulnerability for the at least one computer software;
• retrieve at least one technical mitigation action for the at least one vulnerability including at least one of code modification, hardware or software augmentation, external protection deployment, or protocol configuration;
• compute a mitigation difficulty score for each of the at least one vulnerability based on parameters associated with implementing the at least one technical mitigation action;
• generate recommended technical mitigation actions for the at least one vulnerability based on the mitigation difficulty score and the corresponding at least one technical mitigation action;
• prioritize the recommended mitigation actions based on the mitigation difficulty scores, severities of the corresponding at least one vulnerability, and potential compliance issues;
• provide a prioritized list of recommended technical mitigation actions to vendors, manufacturers, third party organizations for display or implementation.