Abstract: A system that utilizes a risk model. The system preferably includes devices that identify cybersecurity risks, measure the risks, prioritize the risks, and provide options for remediating the risks. The devices may include computing infrastructure. Preferably, measuring the risks is adaptive to various inputs, for example using a score based process. The score based process may involve at least group analysis such as at least scores for risk management, asset configuration and change management, and identity and access management. Various aspects such as the score based process and other aspects may be adaptive and/or involve machine learning. Also, associated methods.

Abstract: Some aspects of the subject technology are a cybersecurity risk tracking method including steps of associating parameters with activities an organization is required to or should perform, quantitatively classifying cybersecurity compliance with respect to the parameters, identifying deficiencies with respect to the cybersecurity compliance, and reporting at least some of the cybersecurity compliance and deficiencies. The reporting may be via a cybersecurity risk tracker. The method may also include tying at least some of the cybersecurity compliance and deficiencies to a vendor. The vendor also may be reported via the cybersecurity risk tracker. In preferred aspects, an adaptive risk model is used to identify the deficiencies. The subject technology also includes systems configured to perform the above techniques.