Patent ID: 11936676
Assignee: CISOTERIA LTD.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 14:
15. A method, comprising:
monitoring, via a security monitoring system, enterprise activity in accordance with security policies and procedures stored in a memory, wherein the security policies and procedures comprise at least one of device information or policy information identifying actions associated with protecting assets of the enterprise and procedure information identifying actions to be performed by personnel to protect the assets of the enterprise;
determining, based on the monitored enterprise activity, whether the enterprise is complying with the stored security policies and procedures;
calculating a risk exposure metric for at least one asset of the enterprise based on the monitored enterprise activity and whether the enterprise is complying with the security policies and procedures;
outputting, to a display, information identifying the risk exposure metric associated with the at least one asset; and
generating, by the security monitoring system, recommendations identifying actions to be taken by the enterprise to reduce the risk exposure metric.