Abstract: A method is provided in accordance with an aspect of the present disclosure. The method includes processing data related to a plurality of security risk metrics for an entity and identifying a change in at least one of the security risk metrics. The security risk metrics are associated with risk component data. The method also includes defining determining modifications in risk assessment data that is associated with the risk component data based on the change in the at least one of the security risk metrics, and displaying information about the risk assessment data and the risk component data.