Abstract: A computerized method features operations conducted by a security analyzer device to process incoming information to ascertain a presence of cybersecurity threats based on a top threat list provided to the security analyzer device. The top threat list includes a plurality of cybersecurity threats prioritized for an enterprise that is subscribing to a threat management system and protected by the security analyzer device. The computerized method further conducts analytics of incoming information to determine a level of correlation between at least a portion of the incoming information and any of the plurality of cybersecurity threats within the top threat lists content, and upon determining the level of correlation between the portion of the incoming information and a cybersecurity threat of the plurality of cybersecurity threats exceeding a first threshold, may conduct operations to neutralize or mitigate the cybersecurity threat.

Abstract: A threat management system features a recommendation engine and an action engine. The recommendation engine is configured to (i) conduct analytics on content from the threat catalog and content from the enterprise profile to generate results that identify a plurality of threats directed to the enterprise and (ii) generate a top threat list based on the analytic results. The action engine is communicatively coupled to the recommendation engine. The action engine is configured to receive the top threat list and generate a plurality of actions corresponding to each threat of the top threat list, where each action of the plurality of actions includes information directed to operations to mitigate or neutralize a risk associated with a threat of the top threat list.