Abstract: The embodiment herein provides a system and a method for assessing a cyber-risk and loss in a cloud infrastructure includes (a) deriving at least one of asset, topology, network or authentication vulnerabilities of a cloud infrastructure, (b) generating a technology risk machine learning model and a technology risk index, (c) generating a compliance risk machine learning model and a compliance risk, (d) generating a ransomware machine learning model and a business risk by processing (i) the compliance risk machine learning model and the compliance risk, (ii) a business input comprising asset information, cash flow, a value of the asset, (e) determining an asset's ransomware risk and loss based on the business risk and (f) automatically enabling one or more actions to mitigate the asset's ransomware risk and loss by fix misconfigurations or upgrading software using an API of cloud infrastructure.

Abstract: The embodiment herein provides a system for securing computer infrastructure and one or more devices that depend on one or more cloud platforms. The system includes a memory, and a processor that stores and executes a set of instructions. The processor is configured to (i) extract one or more information data from at least one of the cloud platforms or the devices that depends on the one or more cloud platforms, (ii) execute compliance tests to identify compliance and non-compliance in the one or more information data, (iii) generate a network topology map by querying the one or more information data, (iv) classify a connectivity between the one or more devices and their nature, (v) compute risk metrics, (vi) re-execute the compliance tests to detect changes, and (vii) implement security compliances without impacting a production or operational environment of the one or more cloud platforms.