Patent ID: 8150717

Claim:
A method for performing risk assessment for an information system comprising: receiving, via at least one computer device executing computer program instructions, an initiating event, wherein said initiating event comprises an automatic trigger event resulting from an occurrence of a predefined state of an information system; accessing, via at least one computer device executing computer program instructions, a contextual data model of the information system and a set of data instances representing at least one operating state of the information system, wherein the contextual data model defines relationships between physical and logical assets of the information system; analyzing, via at least one computer device executing computer program instructions, the contextual data model and set of data instances in relation to a previously established user-selected scenario; generating, via at least one computer device executing computer program instructions, an action plan for the information system and the previously established user-selected scenario; determining, via at least one computer device executing computer program instructions, an automation status of the action plan; and when the automation status is determined to be affirmative, automatically executing, via at least one computer device executing computer program instructions, at least one automation rule to implement the action plan, wherein the automation rule comprises at least one automated process, wherein the at least one automated process executes a series of commands within the information system.