System and Method for Identifying and Predicting Risk
A method predicting risk includes identifying data partners associated with the enterprise and generating a computer readable model of the enterprise including representations of digital and physical assets, and data partners. Risk analysis algorithms may be applied to the computer readable model. A risk model associated with risk analysis may be generated, using the computer readable model, and results of the risk model may be displayed at a user interface.
1 . A method, comprising:
identifying digital and physical assets of an enterprise for monitoring;
identifying data partners associated with the enterprise;
generating a computer readable model of the enterprise including representations of digital and physical assets, and data partners;
applying risk analysis algorithms to the computer readable model;
generating a risk model associated with risk analysis, using the computer readable model; and
displaying results of the risk model at a user interface.
2 . The method of claim 1 , further comprising:
applying a simulated risk analysis to the computer readable model; and
displaying results of the simulated risk analysis at the user interface.
3 . The method of claim 1 , wherein identifying data partners comprises analyzing network traffic through a Domain Name Server (DNS) associated with the enterprise and extracting information regarding destination addresses of data communications.
4 . The method of claim 3 , further comprising:
executing a reverse look-up of a database to determine respective geographic locations associated with the destination addresses; and
storing the respective geographic locations associated with the destination addresses together in a computer readable medium.
5 . The method of claim 3 , further comprising:
converting the information regarding the destination addresses of the data communications to a unified data format;
normalizing the information regarding the destination addresses of the data communications; and
storing the information regarding the destination addresses of the data communications together on a single computer readable medium, in the unified data format.
6 . The method of claim 2 , wherein applying a simulated risk analysis to the computer readable model comprises modeling risk scenarios using a variety of simulation techniques including Markov Chains and Monte Carlo simulations.
7 . The method of claim 2 , further comprising;
determining remediation measures based upon the simulated risk analysis; and
displaying the remediation measures at a graphical user interface.
8 . The method of claim 7 , further comprising;
simulating the remediation measures using the computer readable model; and
predicting a reduction in potential liability based upon the remediation measures.
9 . A computer configured to access a storage device, the computer comprising:
a processor; and
a non-transitory, computer-readable storage medium storing computer-readable instructions that when executed by the processor cause the computer to perform:
identifying digital and physical assets of an enterprise for monitoring;
identifying data partners associated with the enterprise;
generating a computer readable model of the enterprise including representations of digital and physical assets, and data partners;
applying risk analysis algorithms to the computer readable model;
generating a risk model associated with risk analysis, using the computer readable model; and
displaying results of the risk model at a user interface.
10 . The computer of claim 9 , wherein the instructions, when executed by the processor, further cause the computer to perform:
applying a simulated risk analysis to the computer readable model; and
displaying results of the simulated risk analysis at the user interface.
11 . The computer of claim 9 , wherein identifying data partners comprises analyzing network traffic through a Domain Name Server (DNS) associated with the enterprise and extracting information regarding destination addresses of data communications.
12 . The computer of claim 11 , wherein the instructions, when executed by the processor, further cause the computer to perform:
executing a reverse look-up of a database to determine respective geographic locations associated with the destination addresses; and
storing the respective geographic locations associated with the destination addresses together in a computer readable medium.
13 . The computer of claim 11 , wherein the instructions, when executed by the processor, further cause the computer to perform:
converting the information regarding the destination addresses of the data communications to a unified data format;
normalizing the information regarding the destination addresses of the data communications; and
storing the information regarding the destination addresses of the data communications together on a single computer readable medium, in the unified data format.
14 . The computer of claim 10 , wherein applying a simulated risk analysis to the computer readable model comprises modeling risk scenarios using a variety of simulation techniques including Markov Chains and Monte Carlo simulation.
15 . The computer of claim 10 , wherein the instructions, when executed by the processor, further cause the computer to perform:
determining remediation measures based upon the simulated risk analysis; and
displaying the remediation measures at a graphical user interface.
16 . The computer of claim 14 , wherein the instructions, when executed by the processor, further cause the computer to perform:
simulating the remediation measures using the computer readable model; and
predicting a reduction in potential liability based upon the remediation measures.
17 . A computer program product, comprising:
a computer-readable storage medium having computer-readable program code embodied therewith, the computer-readable program code comprising:
computer-readable program code configured to identify digital and physical assets of an enterprise for monitoring;
computer-readable program code configured to identify data partners associated with the enterprise;
computer-readable program code configured to generate a computer readable model of the enterprise including representations of digital and physical assets, and data partners;
computer-readable program code configured to apply risk analysis algorithms to the computer readable model;
computer-readable program code configured to generate a risk model associated with risk analysis; and
computer-readable program code configured to display results of the risk model at a user interface.
18 . The computer program product of claim 17 , the computer-readable program code further comprising:
computer-readable program code configured to apply a simulated risk analysis to the computer readable model; and
computer-readable program code configured to display results of the simulated risk analysis at the user interface.
19 . The computer program product of claim 17 , wherein identifying data partners comprises analyzing network traffic through a Domain Name Server (DNS) associated with the enterprise and extracting information regarding destination addresses of data communications.
20 . The computer program product of claim 17 , the computer-readable program code further comprising:
computer-readable program code configured to execute a reverse look-up of a database to determine respective geographic locations associated with the destination addresses; and
computer-readable program code configured to store the respective geographic locations associated with the destination addresses together in a computer readable medium.