METHODS AND APPARATUS FOR PROCESSING THREAT METRICS TO DETERMINE A RISK OF LOSS DUE TO THE COMPROMISE OF AN ORGANIZATION ASSET

摘要

An apparatus including a memory and a processor that can receive information about asset-agnostic threat information from a source. The processor can receive an indication of an importance of a first organization asset, and can calculate a threat score for the first organization asset based on the information about the asset-agnostic threat information. The processor can calculate a threat score for a second organization asset based on (1) a relationship between the first organization asset and the second organization asset, and (2) the indication of the importance of the first organization asset. The processor can perform threat mitigation for the first organization asset when the threat score for the first organization asset exceeds a predetermined threshold. The processor can perform threat mitigation for the second organization asset when the threat score for the second organization asset exceeds the predetermined threshold.