Patent ID: 8214906

Claim:
A computer program product for evaluating a security risk of an application, the computer program product comprising: one or more computer-readable tangible storage devices and program instructions stored on at least one of the one or more storage devices, the program instructions comprising; program instructions to determine whether employees of two or more customer corporations are authorized to concurrently share use of the application; program instructions to determine whether a vulnerability in the application can be exploited by a user which has not been authenticated to the application; program instructions to determine whether there is a requirement for authentication for user access to the application; program instructions to assign numerical weights to the respective determinations, each of the numerical weights corresponding to a significance of the respective determination in quantifying the security risk; program instructions to combine the numerical weights to quantify the security risk; and program instructions to compare the quantification of the security risk based on the combined numerical weights to a monetary value of a benefit of the application, and based on the comparison, recommend whether to certify the application for use.