One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, a communication interface, and memory, cause the computing platform to:
- load a corpus of documents associated with a particular user;
- create a first plurality of smart groups based on the corpus of documents associated with the particular user;
- generate a first user interface comprising a representation of the first plurality of smart groups;
- receive user input applying one or more labels to a plurality of documents associated with at least one smart group of the first plurality of smart groups;
- create a second plurality of smart groups based on the corpus of documents associated with the particular user and the user input applying the one or more labels to the plurality of documents associated with the at least one smart group of the first plurality of smart groups;
- generate a second user interface comprising a representation of the second plurality of smart groups;
- receive, via the second user interface, user input applying a sensitivity value to one or more documents associated with at least one smart group of the second plurality of smart groups, the sensitivity value indicating a sensitivity of a respective document of the one or more documents associated with the at least one smart group of the second plurality of smart groups;
- calculate a person-centric consequence index for the particular user associated with the corpus of documents based on the user input applying the sensitivity value to the one or more documents associated with the at least one smart group of the second plurality of smart groups;
- output the person-centric consequence index calculated for the particular user associated with the corpus of documents to an enterprise risk classification system;
- and
- update an attacked persons list based on the person-centric consequence index for the particular user associated with the corpus of documents in the enterprise risk classification system, the attacked persons list identifying users of an enterprise organization at risk of being targeted in cybersecurity attacks.