Patent ID: 8453246
Filing Date: 2013-05-28
Classification: G06F,G06Q

Abstract:
1. A method for managing risk in a surface area environment comprising: receiving, at a computer, information regarding a problem in the surface area environment; analyzing, via a computer processor, a security risk associated with the problem, wherein analyzing the security risk includes determining a residual risk score for the surface area environment by multiplying a threat rating by a vulnerabilities rating and by an asset values per volume rating associated with the surface area environment to result in a primary individual risk score and dividing the primary individual risk score by a mitigating controls ranking; analyzing, via a computer processor, controls associated with the surface area environment containing the problem; and generating, via a computer processor, a framework defining at least one control for mitigating the security risk in the surface area environment responsive to the analyzed security risk and controls, wherein the framework comprises a control playbook graph including (1) a first graph indicating a level of risk in the surface area environment over a predetermined period of time, (2) a second graph indicating time, cost and effort for implementing the at least one control in the surface area environment over the predetermined period of time and (3) a security level line indicating of a level of security in the surface area environment based on the at least one control in relation to the first and second graphs.