Abstract: Methods for managing and prioritizing risk include receiving a data set and analyzing the data set for duplicates, false positives, false negatives, and tool errors. Said duplicates, false positives, false negatives and results of tool errors are removed from the data set, creating an input file. The input file is compared against compliance standards to identify any weaknesses, defects, bugs, flaws, vulnerabilities, and/or failures in the input file. The compared input file is mapped to Common Weakness Enumeration standards. A risk prioritization can be generated based on the mapped results. At least one report can be generated based on the risk prioritization.

Abstract: Methods for managing and prioritizing risk include receiving a data set and analyzing the data set for duplicates, false positives, false negatives, and tool errors. Said duplicates, false positives, false negatives and results of tool errors are removed from the data set, creating an input file. The input file is compared against compliance standards to identify any weaknesses, defects, bugs, flaws, vulnerabilities, and/or failures in the input file. The compared input file is mapped to Common Weakness Enumeration standards. A risk prioritization can be generated based on the mapped results. At least one report can be generated based on the risk prioritization.