Methods and systems for complying with network security requirements

A method of complying with computer network security requirements comprising:

• a. Identifying a set of network security risks on a network device;
• b. Storing the set of network security risks in a dataset;
• c. Comparing the dataset of network security risks to baseline system requirements of the network device;
• d. Creating a report to display network security risks not included in the baseline system requirements of the network device;
• and
• e. Mitigating risk of the network security risks not included in the baseline system requirements of the network device by refining the set of network security risks by:
• i. Removing all open sockets currently part of an established network connection;
• ii. Removing all sockets only accessible from a local host;
• iii. Identifying and marking open sockets with a non-static source port;
• and
• iv. Identifying and grouping services that use multiple listening ports.

A system for complying with network security requirements comprising:

• a. A scanner operably configured for identifying network security risks of an electronic device in a network, wherein the risks are selected from open sockets, open ports, running services, and firewalls settings;
• b. Software operably configured for refining the set of network security risks by
• i) removing all open sockets part of an established network connection,
• ii) removing all sockets only accessible from a local host,
• iii) identifying and marking open sockets with a source port that is non-static, and
• iv) identifying and grouping services that use multiple listening ports;
• c. Documentation software operably configured for creating documentation on necessity of the network security risks;
• and
• d. Reporting software operably configured for creating a report that identifies ports and services that have not been adequately documented according to the network security requirements.

A method of complying with computer network security requirements comprising:

• a. Identifying network security risks by scanning one or more device in a network for network security risks selected from open sockets, open ports, running services, and firewalls settings;
• b. Refining the set of network security risks to those requiring documentation;
• c. Creating documentation on the network security risks;
• and
• d. Creating a report of the network security risks and documentation, wherein the report identifies ports and services that have not been adequately documented according to the network security requirements;
• wherein the refining comprises:
• i. Removing all open sockets currently part of an established network connection;
• ii. Removing all sockets only accessible from a local host;
• iii. Identifying and marking open sockets with a non-static source port;
• and
• iv. Identifying and grouping services that use multiple listening ports.