System and method for managing the security health of a network device

1. A method for determining and using a security risk score for devices on a network associated with an entity, the method comprising:

searching the network to automatically identify one or more devices associated with one or more potential security risks;

collecting a first set of data from the one or more devices, the first set of data comprising at least one of a device configuration, an Internet Protocol (IP) address, a Medium Access Control (MAC) address, or data related to software operated on the one or more devices;

collecting a second set of data from an external data source selected from a group consisting of an IoT search engine, a vulnerability management database, a threat intelligence feed, an exploit feed, a social media feed, a bill of material, and a network discovery, the second set of data including risk data;

comparing the second set of data to the first set of data to evaluate a potential security risk and determine a risk score for the one or more devices; and

using the risk score to perform an automated action comprising at least one of (i) providing an alert to a user identifying the potential security risk, (ii) generating a dashboard identifying the potential security risk, or (iii) initiating a corrective action responsive to the potential security risk based on the risk score.

2. The method of claim 1 , wherein the one or more devices comprise a plurality of individual devices, the method further comprising:

comparing the second set of data to the first set of data for each of the individual devices to evaluate potential security risks and determine an individual risk score for each of the individual devices; and

determining an aggregate risk score for the entity by aggregating the individual risk scores for the individual devices and using the individual risk scores for the individual devices as inputs to calculate the aggregate risk score for the entity.

3. The method of claim 2 , wherein the dashboard comprises a ranked list of potential security risks ranked based on the individual risk scores for the individual devices.

4. The method of claim 2 , wherein the aggregate risk score for the entity is used to perform the automated action.

5. The method of claim 2 , wherein the alert includes the aggregate risk score for the entity.

6. The method of claim 1 , wherein the second set of data comprises at least one of architectural data, contextual data, or social media data.

7. The method of claim 1 , wherein the risk score is determined based on at least one of geographical location of the one or more devices, a cyber vulnerability of the one or more devices, or a combination thereof.

8. The method of claim 1 , further comprising normalizing the first set of data before comparing the second set of data to the first set of data.

9. The method of claim 1 , further comprising storing or updating the risk score in a memory.

10. A system for determining and using a security risk score for devices on a network associated with an entity, the system comprising:

at least one processing circuit having at least one processor and at least one memory storing processing instructions that, when executed by the at least one processor, cause the at least one processing circuit to:

search the network to automatically identify one or more devices associated with one or more potential security risks;

collect a first set of data from each of the one or more devices, the first set of data comprising at least one of a device configuration, an IP address, a MAC address, or data related to software operated on the one or more devices;

collect a second set of data from an external data source selected from a group consisting of an IoT search engine, a vulnerability management database, a threat intelligent feed, an exploit feed, a social media feed, a bill of material, and a network discovery, the second set of data including risk data;

compare the second set of data to the first set of data to evaluate a potential security risk and determine a risk score for the one or more devices; and

use the risk score to perform an automated action comprising at least one of (i) providing an alert to a user identifying the potential security risk, (ii) generating a dashboard identifying the potential security risk, or (iii) initiating a corrective action responsive to the potential security risk based on the risk score.

11. The system of claim 10 , wherein the one or more devices comprise a plurality of individual devices, wherein the instructions further cause the at least one processing circuit to compare the second set of data to the first set of data for each of the individual devices to evaluate potential security risks and determine an individual risk score for each of the individual devices; and

determine an aggregate risk score for the entity by aggregating the individual risk scores for the individual devices and using the individual risk scores for the individual devices as inputs to calculate the aggregate risk score for the entity.

12. The system of claim 11 , wherein the dashboard comprises a ranked list of potential security risks ranked based on the individual risk scores for the individual devices.

13. The system of claim 11 , wherein the aggregate risk score for the entity is used to perform the automated action.

14. The system of claim 11 , wherein the alert includes the aggregate risk score for the entity.

15. The system of claim 10 , wherein the second set of data comprises at least one of architectural data, contextual data, or social media data.

16. The system of claim 10 , wherein the risk score is determined based on at least one of geographical location of the one or more devices, a cyber vulnerability of the one or more devices, or a combination thereof.

17. The system of claim 10 , further comprising normalizing the first set of data before comparing the second set of data to the first set of data.

18. The system of claim 10 , further comprising storing or updating the risk score in a memory.