Abstract: Systems, methods, apparatuses, and computer program products for a computer device capable of assessing, measuring, managing, and optimizing cyber risk. For example, certain embodiments described herein may guide risk assessment for individual organizations and for integrated elements of critical infrastructure. Certain embodiments may provide features that make it possible for policy makers and organizational leaders to assess a range of risks introduced by threat actors: a standardized system for classifying cyber threats and events by their effects, tools to associate organizational functions with information technology (IT) network maps or topologies, operations to assess the severity of disruptive and exploitative cyber events, and operations to understand the integrated nature of risk across different parts of a simple organization, across major divisions in a complex organization, or to display the interconnectedness of organizations in a complex system.