A method, comprising: calculating, via a local workspace management compute device operatively coupled to a global workspace management compute device, local workspace cyber-threat data associated with a first local workspace from a plurality of workspaces in a network and instantiated at the local workspace management compute device, the local workspace cyber-threat data associated with the first local workspace calculated based on global workspace cyber-threat data associated with the global workspace included in a workspace hierarchy tree generated by a global workspace management compute device, the workspace hierarchy tree representing a hierarchy of the plurality of workspaces; sending a first signal to a local workspace interface operatively coupled to the local workspace management compute device, the first signal including instructions to display a representation of the plurality of workspaces in the network based on the local workspace cyber-threat data associated with the first local workspace; defining, via the local workspace management compute device, a child node of the first local workspace based on a modification to the local workspace cyber-threat data associated with the first local workspace in response to the local workspace interface receiving input from a local workspace administrator, the input including the modification to the local workspace cyber- threat data associated with the first local workspace; sending a second signal to the local workspace interface, the second signal including instructions to apply a first modification to the representation of the plurality of workspaces in the network based on the child node; determining, via the local workspace management compute device, modified local workspace cyber-threat data for a second local workspace from the plurality of workspaces and associated with the first local workspace based on the modification to the local workspace cyber-threat data associated with the first local workspace; and sending a third signal to the local workspace interface, the third signal including instructions to apply a second modification to the representation of the plurality of workspaces in the network based on the modified workspace cyber-threat data for the second local workspace and an influence factor of the first local workspace. calculating, via a local workspace management compute device operatively coupled to a global workspace management compute device, local workspace cyber-threat data associated with a first local workspace from a plurality of workspaces in a network and instantiated at the local workspace management compute device, the local workspace cyber-threat data associated with the first local workspace calculated based on global workspace cyber-threat data associated with the global workspace included in a workspace hierarchy tree generated by a global workspace management compute device, the workspace hierarchy tree representing a hierarchy of the plurality of workspaces; sending a first signal to a local workspace interface operatively coupled to the local workspace management compute device, the first signal including instructions to display a representation of the plurality of workspaces in the network based on the local workspace cyber-threat data associated with the first local workspace; defining, via the local workspace management compute device, a child node of the first local workspace based on a modification to the local workspace cyber-threat data associated with the first local workspace in response to the local workspace interface receiving input from a local workspace administrator, the input including the modification to the local workspace cyber- threat data associated with the first local workspace; sending a second signal to the local workspace interface, the second signal including instructions to apply a first modification to the representation of the plurality of workspaces in the network based on the child node; determining, via the local workspace management compute device, modified local workspace cyber-threat data for a second local workspace from the plurality of workspaces and associated with the first local workspace based on the modification to the local workspace cyber-threat data associated with the first local workspace; and sending a third signal to the local workspace interface, the third signal including instructions to apply a second modification to the representation of the plurality of workspaces in the network based on the modified workspace cyber-threat data for the second local workspace and an influence factor of the first local workspace.