Abstract: An automated security monitoring and management framework which mimics the mind of a seasoned security expert and which is designed to provide security management, governance and compliance with business context risk assessment is described. The framework comprises of a central management center and a plurality of modules, whereby said framework has the ability to incorporate all security mechanisms into one cohesive solution. Our approach in management eliminates the human factor providing consistent, repeatable and scalable result in the enterprise. It is an agent-less, vendor-agnostic framework that is constantly working to maintain security and governance. Moreover, said framework is capable of correlating alerts and events from disparate systems providing a global view of one's security status, and hence acts as a system that helps in identifying the patterns of threats as they develop. The framework simulates the tasks of a security engineer and automates a day in the life cycle of a security engineer.