Systems and methods for assessing security risks of users of computer networks of organizations

A system for assessing security risks of users of computer networks of organizations, the system comprising:

• a detection module, stored in memory, that detects, at a risk computing device, a location of a host electronically accessed by a user computing device, the host location comprising a network location and having an electronic address outside of a computer network of an organization;
• an identification module, stored in memory, that identifies, at the risk computing device, a host user credential sent to the host location from the user computing device;
• a determination module, stored in memory, that determines, at the risk computing device, that the host user credential matches an organization user credential associated with the organization's computer network;
• a calculation module, stored in memory, that calculates, at the risk computing device, a risk score for a user of the user computing device based on the determination that the host user credential matches the organization user credential;
• and
• at least one physical processor that executes the detection module, the identification module, the determination module, and the calculation module;
• wherein:
• the determination module further determines, at the risk computing device, that the user presents a security risk to the organization's computer network based on the risk score;
• the system further comprises a security module, stored in memory, that performs, at the risk computing device, a security action to protect the organization's computer network based on the determination that the user presents a security risk to the organization's computer network;
• and
• the physical processor further executes the security module.

A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

• detect, at a risk computing device, a location of a host electronically accessed by a user computing device, the host location comprising a network location and having an electronic address outside of a computer network of an organization;
• identify, at the risk computing device, a host user credential sent to the host location from the user computing device;
• determine, at the risk computing device, that the host user credential matches an organization user credential associated with the organization's computer network;
• calculate, at the risk computing device, a risk score for a user of the user computing device based on the determination that the host user credential matches the organization user credential;
• determine, at the risk computing device, that the user presents a security risk to the organization's computer network based on the risk score;
• and
• perform, at the risk computing device, a security action to protect the organization's computer network based on the determination that the user presents a security risk to the organization's computer network.