System for automated electronic data exfiltration path identification, prioritization, and remediation

A computer program product for identifying and remediating data exfiltration paths, the computer program product comprising at least one non-transitory computer readable medium having computer-readable program code portions embodied therein, the computer-readable program code portions comprising executable code portions for:

• identifying one or more sets of target data for exfiltration;
• generating a map of exfiltration pathways for each of the one or more sets of target data;
• identifying one or more implemented data security controls and one or more unimplemented data security controls for each exfiltration pathway in the map of exfiltration pathways;
• generating a prioritization scheme based on the map of exfiltration pathways, wherein generating the prioritization scheme comprises generating an exfiltration score for each exfiltration pathway, wherein the exfiltration score is based on the one or more implemented data security controls, the one or more unimplemented data security controls, and an exfiltration frequency, wherein the exfiltration frequency comprises a number of times exfiltration was attempted and a number of times exfiltration succeeded;
• and
• displaying to a user one or more recommendations based on the prioritization scheme.

A computer-implemented method for identifying and remediating data exfiltration paths, wherein the computer-implemented method comprises:

• identifying one or more sets of target data for exfiltration;
• generating a map of exfiltration pathways for each of the one or more sets of target data;
• identifying one or more implemented data security controls and one or more unimplemented data security controls for each exfiltration pathway in the map of exfiltration pathways;
• generating a prioritization scheme based on the map of exfiltration pathways, wherein generating the prioritization scheme comprises generating an exfiltration score for each exfiltration pathway, wherein the exfiltration score is based on the one or more implemented data security controls, the one or more unimplemented data security controls, and an exfiltration frequency, wherein the exfiltration frequency comprises a number of times exfiltration was attempted and a number of times exfiltration succeeded;
• and
• displaying to a user one or more recommendations based on the prioritization scheme.