Patent Document ID: 20110178942
Application ID: 12689160
Patent Flag: 0

Claim One:
1. An automated method of selecting security actions, comprising: estimating a maximum forecast loss based on a valuation of an organization; identifying a plurality of general threats that threaten the organization; identifying a plurality of sector specific threats that threaten the organization; identifying a plurality of targeted threats that threaten the organization; a computer forecasting a security loss based on the estimated maximum forecast loss, based on the general threats, based on the sector specific threats, and based on the targeted threats; the computer estimating a reduction in the security loss based on a first investment in a countermeasure directed to the general threats; the computer estimating a reduction in the security loss based on a second investment in a countermeasure directed to the sector specific threats; the computer estimating a reduction in the security loss based on a third investment in a countermeasure directed to the targeted threats; and the computer allocating at least a portion of a security investment budget among the first investment, the second investment, and the third investment to maximize the estimated reduction in security loss.