Patent ID: 11936676
Assignee: CISOTERIA LTD.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 21:
22. A non-transitory computer-readable medium storing instructions, which when executed by a processor, cause the processor to:
monitor enterprise activity associated with an enterprise in accordance with security policies and procedures stored in a memory, wherein the security policies and procedures comprise at least one of device information or policy information identifying actions associated with protecting assets of the enterprise and procedure information identifying actions to be performed by personnel to protect the assets of the enterprise;
determine, based on the monitored enterprise activity, whether the enterprise is complying with the stored security policies;
calculate a risk exposure metric for at least one asset of the enterprise based on the monitored enterprise activity and whether the enterprise is complying with the security policies;
output, to a display, information identifying the risk exposure metric associated with the at least one asset; and
generate recommendations identifying actions to be taken by the enterprise to reduce the risk exposure metric.