Abstract: A system for cyber risk assessment includes: a processor; and memory connected to the processor, wherein the memory stores instructions that, when executed by the processor, cause the processor to: receive data corresponding to one or more technology stacks; access one or more security standards in a data store connected to the processor, at least one of the security standards corresponding to at least one of the technology stacks; and determine a cyber risk score based on the data and the at least one of the security standards.