Systems and methods for data security notification generation

A computer-implemented method comprising:

• generating, based on received input, an aspirational profile defining a level of acceptable risk;
• generating a behavior profile based on monitoring data that includes a list of applications installed on a remote computing device and levels of permission granted to the installed applications to access one or more types of data;
• and
• when the behavior profile is misaligned with the aspirational profile, modifying one of the aspirational profile or the levels of permission granted to one or more of the installed applications.

A non-transitory computer-readable storage medium storing instructions that, when executed by a processor of a computing system, cause the computing system to:

• generate, based on received input, an aspirational profile defining a level of acceptable risk;
• generate a behavior profile based on monitoring data that includes a list of applications installed on a remote computing device and levels of permission granted to the installed applications to access one or more types of data;
• and
• when the behavior profile is misaligned with the aspirational profile, modify one of the aspirational profile or levels of permission granted to one or more of the installed applications.