Patent ID: 7752125

Claim:
A computer implemented method of automatically assessing risk associated with one or more assets, comprising the steps of: providing a compliance management system on said computer, wherein said computer is connected to a network comprising said assets for allowing said compliance management system to access said network; discovering said assets on said network by an asset module of the compliance management system, wherein said discovered assets comprise one or more previously discovered assets and recently added assets; selecting an asset from the discovered assets through said compliance management system, wherein the asset comprises one or more attributes, and wherein the asset and the attributes associated with the asset are automatically reported back to the compliance management system; collecting a plurality of risk factors associated with said selected asset through an interface module associated with the compliance management system, wherein one or more of said risk factors are collected in real-time by a risk management module of the compliance management system; mapping the collected risk factors to a plurality of risk factor values that are input to a non-linear statistical data model; calculating a risk score based on one or more of said mapped risk factor values using the non-linear statistical data model, wherein said non-linear statistical data model is self trainable using a feedback mechanism; and automatically assessing said risk using said calculated risk score; whereby the calculated risk score allows automatic assessment of the risk associated with one or more of the assets.