Abstract: A system may receive a plurality of security threats and categorize each security threat in the plurality of security threats into security threat categories. The system may then determine, based at least in part upon an instance of a security threat category, a future occurrence of the security threat category and determine, based at least in part upon the future occurrence of the security threat category, that the security threat category is an emerging threat.

Abstract: According to one embodiment, a system includes a memory, a processor, and an interface. For a first region, the processor calculates a risk associated with a political situation of the first region, a risk associated with a legal situation of the first region, a risk associated with an economic situation of the first region, a risk associated with a social situation of the first region, a risk associated with a technological situation of the first region, and a risk associated with an environmental situation of the first region. For a first entity, the processor calculates a risk associated with an exposure level of the first entity in the first region. Based at least on these calculated risks, the processor calculates a ranking for the first region, the ranking representing an amount of risk to the first entity in the first region. The interface communicates the ranking for display.

Abstract: According to one embodiment, a system may receive a plurality of security threats and categorize each security threat in the plurality of security threats into security threat categories. The system may then determine, based at least in part upon an instance of a security threat category, a future occurrence of the security threat category and determine, based at least in part upon the future occurrence of the security threat category, that the security threat category is an emerging threat.

Abstract: According to one embodiment, a system includes a memory, a processor, and an interface. For a first region, the processor calculates a risk associated with a political situation of the first region, a risk associated with a legal situation of the first region, a risk associated with an economic situation of the first region, a risk associated with a social situation of the first region, a risk associated with a technological situation of the first region, and a risk associated with an environmental situation of the first region. For a first entity, the processor calculates a risk associated with an exposure level of the first entity in the first region. Based at least on these calculated risks, the processor calculates a ranking for the first region, the ranking representing an amount of risk to the first entity in the first region. The interface communicates the ranking for display.

Abstract: A system and method of identifying, assessing and prioritizing risks are provided. The system and method may include a risk identification module that may identify one or more risks to a business, organization, entity, group or department within the entity, etc. One or more risk variables associated with each identified risk may then be identified. In some examples, the risk variables may be the same or substantially similar for all identified risks. A risk score for each identified risk variable may be determined and an overall risk score for each identified risk may then be determined based on the determined variable risk scores. In some examples, the overall score may be normalized on a predetermined scale. Once an overall score for each risk is determined, the risks having the highest priority may be identified.

Abstract: A computer system assesses the overall risk for different technologies for an organization. Technologies may be evaluated by obtaining severity levels and environmental risk scores for the vulnerabilities associated with the technologies. Each severity level measures a possible risk level of a corresponding vulnerability, while each environmental risk score is based on the organization's environment. Technology risk scores are then determined from the severity levels and the environmental risk scores. Each technology may then be categorized from a statistical distribution of the technology risk scores. An indexed risk score for each technology may also be determined based on time trending variables. Inputs may be a number of vulnerabilities, blended advisory/severity scores, and a standard deviation of the blended advisory/severity scores, and the results then provide behavior forecasting of the technologies.