Patent ID: 7287280

Claim:
A computer-implemented method for managing risk related to a security risk event, the method comprising: receiving information relating to a particular security risk event; automatically processing, by a computer, the information received to associate the received information with a first set of risk variables related to the particular security risk event; defining a second set of risk variables related to the particular security risk event, wherein the first set of risk variables and the second set of risk variables are different; manually associating, in an instance the received information cannot be automatically processed to associate the received information with the first set of risk variables, the first set of risk variables with the received information that cannot be automatically processed; associating a portion of the received information related to the particular security risk event and not associated with the first set of risk variables with the second set of risk variables; calculating a security level using the processed information and a set of relationships established between the first set and second set of risk variables; and automatically executing an action in response to said security level exceeding a predetermined threshold.