Abstract: Apparatuses, methods, systems, and program products are disclosed for security configuration management. An apparatus includes an asset module that identifies a plurality of network assets of a data network comprising a plurality of interconnected physical and virtual computing components. An apparatus includes a security module that monitors changes in security controls and configurations for the interconnected physical and virtual computing components of the network assets relative to an applied security configuration policy. An apparatus includes an interface module that notifies a user of a monitored change in the security controls and configurations and graphically presents a user interface to the user comprising one or more actions in response to the monitored change.

Abstract: Apparatuses, methods, systems, and program products are disclosed for baseline network dependency mapping and alerting. An apparatus includes an asset module that identifies a plurality of network assets of a data network, a dependency module that determines dependencies between the plurality of network assets across different physical and virtual layers within the data network, and a baseline module that generates a snapshot of the plurality of network assets and the dependencies between the plurality of network assets across the different physical and virtual layers within the data network at a point in time.

Abstract: Apparatuses, methods, systems, and program products are disclosed for network asset risk analysis. An apparatus includes an asset module that identifies a plurality of network assets of a data network, a risk module that calculates a risk level for each of the plurality of network assets based on a plurality of factors, and an interface module that provides an interactive interface that graphically presents the data network and visually highlights each of the plurality of network assets according to their calculated risk levels.