Patent ID: 11948115
Assignee: RISKRECON INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 10:
11. A non-transitory computer-readable medium having instructions stored thereon, the computer-executable instructions, when executed by a processor, causing the processor to:
receive a network identifier associated with a network-accessible computer system/asset of an organization;
access, via a network, a set of network-accessible computer systems/assets, including the network-accessible computer system/asset and a plurality of related network-accessible computer systems/assets;
determine indicia of content features/characteristics for each of a subset of the set of the network-accessible computer systems/assets;
determine indicia of security features/characteristics of each of the subset of the set of the network-accessible computer systems/assets;
determine network proximity between respective network-accessible computer systems/assets;
assign a value at risk for each of the subset of the network-accessible computer systems/assets based on a combination of the indicia of content features/characteristics, the indicia of security features/characteristics, and the network proximity between network-accessible computer systems/assets, wherein the value at risk represents a measure of relative organizational risk exposure or loss potential in an event of compromise of a respective network-accessible computer system/asset; and
automatically prioritize allocation of security controls/measures among the subset of the network-accessible computer systems/assets based on respective assigned values at risk.