Method, apparatus, and computer-readable medium for data breach simulation and impact analysis in a computer network

An apparatus for data breach simulation and impact analysis in a computer network, the apparatus comprising:

• one or more processors;
• and
• one or more memories operatively coupled to at least one of the one or more processors and having instructions stored thereon that, when executed by at least one of the one or more processors, cause at least one of the one or more processors to:
• generate an exposure matrix corresponding to a plurality of data stores connected to the computer network, the exposure matrix storing a correspondence between one or more regulations and an exposure of each data store in the plurality of data stores to the one or more regulations;
• generate a plurality of approximation matrices from the exposure matrix by iteratively applying a data compression algorithm to the exposure matrix, each successive iteration of the data compression algorithm being configured to more closely approximate the exposure matrix than a previous iteration of the data compression algorithm;
• simulate a plurality of data breach and mitigation scenarios on the plurality of data stores based at least in part on the plurality of approximation matrices to determine an overall impact of each data breach and mitigation scenario;
• and
• determine an optimal data breach and mitigation scenario in the plurality of data breach and mitigation scenarios based at least in part on the overall impact corresponding to each data breach and mitigation scenario.

At least one non-transitory computer-readable medium storing computer-readable instructions that, when executed by one or more computing devices, cause at least one of the one or more computing devices to:

• generate an exposure matrix corresponding to a plurality of data stores connected to the computer network, the exposure matrix storing a correspondence between one or more regulations and an exposure of each data store in the plurality of data stores to the one or more regulations;
• generate a plurality of approximation matrices from the exposure matrix by iteratively applying a data compression algorithm to the exposure matrix, each successive iteration of the data compression algorithm being configured to more closely approximate the exposure matrix than a previous iteration of the data compression algorithm;
• simulate a plurality of data breach and mitigation scenarios on the plurality of data stores based at least in part on the plurality of approximation matrices to determine an overall impact of each data breach and mitigation scenario;
• and
• determine an optimal data breach and mitigation scenario in the plurality of data breach and mitigation scenarios based at least in part on the overall impact corresponding to each data breach and mitigation scenario.