Abstract: A method for the assessment of an entities vulnerability to a cyber attack is disclosed that includes the steps of creating a current profile for the entity based upon preselected selected risk factors, conducting a risk assessment of said entity based upon said risk assessment profile to create a risk profile which calculates a plurality of risk values; selecting a target profile based upon said current profile of said entity, said target profile further comprising a target risk profile, said target risk profile further comprising a plurality of values, comparing said risk profile with said target risk profile, calculating the differences in said risk values calculated in said risk profile creation step with predetermined values in said target risk profile, wherein said method is performed on a computing device to receive input and, in responses to said input, providing an output based upon predesignated instructions, and said output further comprises a graphic display that includes a representation of value