DECO (Data Enrichment & Contextualization Officer)
DECO: Enrich Data, Elevate Context, Empower Decisions.
Publisher
Accenture
Product Details
This agent ingests, contextualizes, and enriches raw CVE data with organizational asset information. An Ingestor sub-agent, scheduled through Cloud Scheduler, proactively collects new CVE information. An Enricher sub-agent then processes the raw data, queries BigQuery for asset context, applies enrichment rules, and passes results through Pub/Sub. It works with external (NVD) and internal (AssetInventory) data sources.
The agent automates the first step in vulnerability management by correlating external vulnerabilities with the internal asset inventory and identifying affected assets and their business criticality. Vulnerability Management teams, Security Operations Centers (SOCs), and IT Risk & Compliance teams are the primary users. It is estimated to reduce manual effort by 75%, improve data accuracy for risk decisions, and speed up contextualization. It uses Cloud Scheduler, Cloud Functions, Pub/Sub, BigQuery, and Secret Manager.
Key Use Cases
Context-Aware Vulnerability Prioritization
Ingests NVD vulnerability feeds and cross-references them against enterprise asset inventories in BigQuery to instantly highlight exposures on business-critical systems.
Automated Security Remediation Triggering
Publishes enriched CVE metadata and asset criticality scores through Cloud Pub/Sub to trigger targeted incident tickets for SOC and IT operations teams.
Explore detailed deployment path
Requires Gemini. Access integration prerequisites, specialized agent configuration guides, and implementation documentation.