Abstract: An organizational cyber security system, the organizational cyber security system comprising a processing resource configured to: obtain: (a) organization characterization information characterizing an organization and (b) known threats information of known cyber security threats; identify one or more potential threats of the known cyber security threats that pose the respective threats to the organization, being the known cyber security threats that are executable on the organizational assets according to the organization characterization information; and generate one or more attack scenarios simulating execution of one or more of the potential threats on one or more of the organizational assets, being target organizational assets.

Abstract: An organizational asset discovery and ranking system, the organizational asset discovery and ranking system comprising processing circuitry configured to: obtain (a) permissions information indicative of permissions of users of an organizational network of an organization to access assets accessible via the organizational network, and (b) one or more additional inputs; and determine an importance score for each given asset of the assets, based on the permissions information and on at least one of the additional inputs.