Abstract: A system for provider network deficiency management includes a deficiency management computing system in a provider network having a machine-readable definition file and a knowledge graph. A method for provider network deficiency management includes receiving a machine-readable definition file and generating a knowledge graph based on the machine-readable definition file. Additionally or alternatively, the method can include any or all of: scanning provider network infrastructure; analyzing software for vulnerabilities; determining a deficiency finding based on the knowledge graph; providing the deficiency finding in a user interface; or any other suitable processes.