Enterprise cyber security risk management and resource planning

A method, comprising:

• monitoring, via a security monitoring system, enterprise activity in accordance with network-related security policies and procedures stored in a memory, wherein the security policies and procedures comprise policy information identifying actions associated with protecting assets of the enterprise and procedure information identifying actions to be performed by personnel associated with protecting assets of the enterprise, and wherein the monitoring includes monitoring actions associated with the policy information and monitoring actions to be performed by the personnel associated with the procedure information;
• determining, based on the monitored enterprise activity, whether the enterprise is complying with the stored security policies and procedures including the actions associated with the policy information and the actions to be performed by the personnel associated with the procedure information;
• calculating a risk exposure metric for at least one asset of the enterprise based on the monitored enterprise activity and whether the enterprise is complying with the security policies and procedures including the stored policy information and the stored procedure information;
• outputting, to a display, a graphical user interface (GUI) providing information identifying the risk exposure metric associated with the at least one asset;
• and
• at least one of:
• receiving, via the GUI, an input to initiate the generation of recommendations identifying actions to be taken to reduce the risk exposure metric, or
• generating, by the security monitoring system, recommendations identifying actions to be taken to reduce the risk exposure metric.

A non-transitory computer-readable medium storing instructions, which when executed by a processor, cause the processor to:

• monitor enterprise activity associated with a plurality of an enterprise's networked devices in accordance with network-related security policies and procedures stored in a memory, wherein the security policies and procedures comprise policy information identifying actions associated with protecting assets of the enterprise and procedure information identifying actions to be performed by personnel associated with the enterprise, wherein the monitoring includes monitoring actions associated with the policy information and monitoring actions to be performed by the personnel associated with the procedure information;
• determine, based on the monitored enterprise activity, whether the enterprise is complying with the stored security policies and procedures including the actions associated with the policy information and the actions to be performed by the personnel associated with the procedure information;
• calculate a risk exposure metric for at least one asset of the enterprise based on the monitored enterprise activity and whether the enterprise is complying with the security policies and procedures including the stored policy information and the stored procedure information, wherein the at least one asset comprises enterprise data;
• output, to a display, a graphical user interface (GUI) providing information identifying the risk exposure metric associated with the at least one asset;
• and
• at least one of:
• receive, via the GUI, an input to initiate the generation of recommendations identifying actions to be taken to reduce the risk exposure metric, or
• generate recommendations identifying actions to be taken to reduce the risk exposure metric.