Patent ID: 8375199

Claim:
A computer-implemented method for managing risk related to a security risk event, the method comprising: receiving information relating to a particular security risk event; correlating, by a computer, a first subset of the received information with a first set of risk variables related to the particular security risk event including assigning individual scaled weighting values to information elements that make up the first subset of the received information based on the first set of risk variables; notifying by the computer if a second subset of the received information cannot be associated with the first set of risk variables; receiving a second set of risk variables related to the received information, wherein the first set of risk variables and the second set of risk variables are different; correlating the second subset of the received information with the received second set of risk variables including assigning individual scaled weighting values to information elements that make up the second subset of the received information based on the second set of risk variables; establishing a relationship between the first set of risk variables and the received second set of risk variables; adjusting at least one of the weighting values based on the established relationship between the first set of risk variables and the second set of risk variables; calculating a security level based on the weighting values of the first subset of the received information, the weighting values of the second subset of the received information, and the established relationship between the first set and the second set of risk variables; and generating a suggested security measure according to the calculated security level.