Abstract: This disclosure provides for patch monitoring and analysis, such as in an industrial process control and automation system. A method includes discovering at least one connected device by a risk manager system, including a software module for the connected device and installed patch information for the software module. The method includes identifying current patch information for the software module by the risk manager system. The method includes populating a patch definition file according to the device, the software module, the installed patch information, the current patch information, by the risk manager system. The method includes analyzing the patch definition file. The method includes producing an output based on the analysis by the risk manager system, the output including the software module, the installed patch information, the current patch information, and the status of the software module with respect to the installed patch information.

Abstract: A method includes obtaining information associated with a service provider's activities with respect to a computing system, where the service provider's activities include changes to the computing system. The method also includes identifying a specified time period and generating a graphical display containing a service roadmap. The service roadmap identifies one or more of the changes to the computing system that have occurred or will occur within the specified time period. The method further includes, in response to a user selection of one of the changes to the computing system in the service roadmap, updating the graphical display to include additional information about the selected change to the computing system. The characteristics of the service provider's activities could include multiple characteristics related to contractual requirements of a service agreement and multiple characteristics related to performance characteristics of computing devices and computing networks in the computing system.

Abstract: A method includes obtaining information associated with a service provider's activities with respect to a computing system. The method also includes identifying multiple key performance indicator (KPI) scores using the information, where the KPI scores are associated with different characteristics of the service provider's activities with respect to the computing system. The method further includes generating a graphical display containing one or more of the KPI scores, where each KPI score is presented in the graphical display using a graphical indicator that identifies the KPI score and where the KPI score falls within a range of scores. The characteristics of the service provider's activities could include multiple characteristics related to contractual requirements of a service agreement and multiple characteristics related to performance characteristics of computing devices and computing networks in the computing system.

Abstract: A method includes obtaining information associated with a service provider's activities with respect to a computing system. The method also includes identifying multiple key performance indicator (KPI) scores using the information, where the KPI scores are associated with different characteristics of the service provider's activities with respect to the computing system. The method further includes identifying an overall score for the service provider using the KPI scores and weights associated with the KPI scores. In addition, the method includes generating a graphical display containing the overall score and/or one or more of the KPI scores. The characteristics of the service provider's activities could include multiple characteristics related to contractual requirements of a service agreement and multiple characteristics related to performance characteristics of computing devices and computing networks in the computing system.

Abstract: A method includes obtaining information associated with a service provider's activities with respect to a computing system, where the service provider's activities include changes to the computing system. The method also includes identifying a specified time period and generating a graphical display containing a service roadmap. The service roadmap identifies one or more of the changes to the computing system that have occurred or will occur within the specified time period. The method further includes, in response to a user selection of one of the changes to the computing system in the service roadmap, updating the graphical display to include additional information about the selected change to the computing system. The characteristics of the service provider's activities could include multiple characteristics related to contractual requirements of a service agreement and multiple characteristics related to performance characteristics of computing devices and computing networks in the computing system.

Abstract: A method includes obtaining information associated with a service provider's activities with respect to multiple computing systems at multiple locations. For each location, the method includes identifying multiple key performance indicator (KPI) scores using the information, where the KPI scores are associated with different characteristics of the service provider's activities with respect to the computing system at that location. For each location, the method also includes identifying an overall location score associated with that location for the service provider using the KPI scores associated with that location and weights associated with the KPI scores. The method further includes identifying an overall multi-site score associated with the multiple locations using the overall location scores associated with the locations. In addition, the method includes generating a graphical display based on at least one of: the overall location scores, the overall multi-site score, and the KPI scores.

Abstract: This disclosure provides for risk management in an air-gapped environment. A method includes collecting data, by a risk manager system, from a plurality of computing devices in an air-gapped environment. The air-gapped environment includes a control system that is substantially or completely isolated from unsecured external networks. The method includes applying rules to analyze the collected data and identify cyber-security threats to the computing devices in the air-gapped environment. The method includes interacting with a user to display the results of the analysis and the identified cyber-security threats.

Abstract: This disclosure provides for patch monitoring and analysis, such as in an industrial process control and automation system. A method includes discovering at least one connected device by a risk manager system, including a software module for the connected device and installed patch information for the software module. The method includes identifying current patch information for the software module by the risk manager system. The method includes populating a patch definition file according to the device, the software module, the installed patch information, the current patch information, by the risk manager system. The method includes analyzing the patch definition file. The method includes producing an output based on the analysis by the risk manager system, the output including the software module, the installed patch information, the current patch information, and the status of the software module with respect to the installed patch information.