Patent ID: 11909757
Assignee: AMERICAN INTERNATIONAL GROUP, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 1:
2. The method of claim 1, further comprising:
determining, by the processor using the risk model, a threat likelihood value, a business impact value and a control effectiveness value based on the first operational characteristics of the computer network at the first time,
wherein the business impact value is based on asset data associated with an operational configuration of the computer network, and
wherein the control effectiveness value is based on how security controls reduce an implicit risk score;
determining, by the processor, a product of the threat likelihood value and the business impact value; and
deducting, by the processor, the control effectiveness value from the product to create a residual risk score for the first operational characteristics of the computer network at the first time.