Patent ID: 8020210
Filing Date: 2011-09-13
Classification: G06F,H04L

Abstract:
1. A processor-implemented method for assessing security of a subset of information resources including one or more information resources, wherein the subset of information resources is a subset of a plurality of information resources, the method comprising: classifying security determination factors; assigning values to the classified security determination factors; associating each of the classified security determination factors with at least one security assessment factor wherein the at least one security assessment factor comprises at least one of: combining the security determination factors associated with the at least one security assessment factor to determine a security assessment factor value based on the values assigned to the security determination factors; determining, using a computer processor, a security risk index based at least in part on the at least one security assessment factor value, wherein the security risk index represents a security of the subset of information resources; certifying the security of the specific subset of information resources with the security risk index when a local security risk index of the specific subset of information resources reaches a predetermined certification level indicating that the specific subset of information resources associated with the entity is secure, wherein the certification level is indicated by a dynamic value determined in part by a general security risk index; tallying a number of the security determination factors associated with the at least one security assessment factor; determining a security risk index preciseness value derived from the tallied number of security determination factors; determining a security risk index quality rating derived from the determined preciseness value; and generating an information resource security assessment report including correlation of the security risk index with the security risk index quality rating.