System and method for protecting a computer network

A system, comprising:

• a first server comprising a storage unit at a client site and in communication with a local computer system, wherein the storage unit comprises:
• a remedy repository for receiving data from a global remedy package, in turn, comprising at least one remedy to repair a vulnerability in a computer network and obtained via the Internet from a primary provider;
• a patch repository for receiving data from a global patch package, in turn, comprising at least one patch to repair a vulnerability in the computer network and obtained via the Internet from at least one secondary provider, wherein the packages are requested at the client site for transfer of at least one remedy and optionally at least one patch to the local computer system to repair a vulnerability;
• a custom repository comprising prioritization data and testing approval data originating from within the client site;
• wherein the client site is operable to receive the at least one remedy from the first server via a local remedy server separate from the first server and is further operable to optionally receive the at least one patch from the first server via a local patch server separate from the first server and the local remedy server;
• wherein the local remedy server is provided by the primary provider of the global remedy package;
• wherein a globally connected system comprises the first server, the at least one local remedy server, the at least one local patch server, and the local computer system;
• wherein a disconnected system at the client site comprises a second server, at least one second local remedy server and at least one second local patch server, wherein each of the at least one second local remedy server and at least one second local patch server communicates, independently, with a second local computer system;
• wherein the first server in the globally connected system is adapted to transfer at least one of the global remedy package and the global patch package on a data transfer media, and the at least one disconnected local remedy server and at least one disconnected local patch server being adapted to receive at least a portion of the global remedy package and the global patch package from the data transfer media.

A method, comprising:

• generating remedies at a primary provider to repair vulnerabilities in a computer network and combining the remedies into a global remedy package;
• generating patches at a secondary provider to repair vulnerabilities in the computer network and combining the patches into a global patch package;
• sending the global remedy package and the global patch package upon request by a client to a remedy and patch server wherein the global remedy package comprises remedy data, patch validation data, and association data of a remedy to at least one vulnerability;
• disseminating the remedy package directly or indirectly to a local remedy server and the global patch package to a local patch sever after downloading to the remedy and patch server;
• and
• disseminating the remedy package from the local remedy server to a local computer system and applying the remedy on the local computer system;
• wherein the remedy and patch server, the local remedy server and the local patch server include separate servers;
• wherein the local remedy server is provided by the primary provider of the global remedy package;
• disseminating the remedy package directly or indirectly to the local remedy server on a system disconnected from the remedy and patch server and the global patch package to the local patch sever on the disconnected system after downloading to the remedy and patch server;
• and
• disseminating the remedy package from the local remedy server to a local computer system on the disconnected system.