Patent ID: 7380270
Filing Date: 2008-05-27
Classification: G06Q

Abstract:
1. A method of assessing risk over a computer network having at least one target system and a server that communicates with the at least one target system via the computer network, the server performing the method comprising the steps of: a) enabling a user to choose at least one of a plurality of predefined process steps pertaining to collecting information descriptive of at least one aspect of a target system hardware and/or software, and/or a physical environment in which the target system operates; b) testing the target system against at least one test procedure selected to satisfy at least one predefined standard, regulation and/or requirement with which the target system is to comply; c) generating a score for at least one threat element, the score indicating a likelihood of that threat element affecting the target system; d) receiving at least a portion of the result of tests performed for the at least one test procedure in said step b); and e) (1) obtaining a threat correlation indication associated with said at least one test procedure, wherein said threat correlation indication indicates a relative potential of one or more given threats to exploit a vulnerability caused by a failure of said at least one test procedure, and