Network portion risk assessment

A system comprising:

• a memory;
• and
• a processing device, operatively coupled to the memory, to:
• access network traffic from a network;
• determine an entity type associated with at least one entity communicatively coupled to the network;
• determine a network portion associated with the at least one entity based on a context of the at least one entity, wherein the context comprises at least one of an entity type and an entity function;
• determine a risk associated with the at least one entity, wherein the risk associated with the at least one entity is based on an objective associated with minimizing entity sensitivity and an entity types mix within the network portion, wherein the entity sensitivity is based on the sensitivity of data that the entity processes or stores;
• determine a risk associated with the network portion associated with the at least one entity based on the risk associated with the at least one entity, wherein the risk associated with the network portion is based on a sensitivity associated with the at least one device;
• and
• store the risk associated with the network portion.

A non-transitory computer readable medium having instructions encoded thereon that, when executed by a processing device, cause the processing device to:

• access network traffic from a network;
• determine an entity type associated with at least one entity communicatively coupled to the network;
• determine a network portion associated with the at least one entity based on a context of the at least one entity, wherein the context comprises at least one of an entity type and an entity function;
• determine a risk associated with the at least one entity, wherein the risk associated with the at least one entity is based on an objective associated with minimizing entity sensitivity and an entity types mix within the network portion, wherein the entity sensitivity is based on the sensitivity of data that the entity processes or stores;
• determine, by the processing device, a risk associated with the network portion associated with the at least one entity based on the risk associated with the at least one entity, wherein the risk associated with the network portion is based on a sensitivity associated with the at least one device;
• and
• store the risk associated with the network portion.