Abstract: A method includes aggregating network data associated with assets included in the network and associated with an organization, extracting defect features associated with the assets based on control data associated with the network and asset data associated with the assets, extracting threat features related to the organization, an industry associated with the organization, or the assets, determining risk information respectively associated with the assets based on the extracted threat features and the extracted defect features, generating a network graph based on the aggregated network data and the risk information, wherein each node in the network graph represents a respective asset included in the network, performing an automated analysis of the network graph, and generating a task plan based on performing the automated analysis of the network graph. Generating the task plan includes prioritizing individual assets or sets of connected assets in a defined neighborhood of the network.