Determining financial risk based on cybersecurity data for remediation thereof

Medium A non-transitory computer-readable comprising instructions that, when executed, cause one or more processors to perform steps of:

• obtaining cybersecurity monitoring data for an organization where the cybersecurity monitoring data is from a plurality of sources including from cybersecurity monitoring of a plurality of users associated with the organization;
• determining a current cyber risk posture of the organization based on the cybersecurity monitoring data, wherein the current cyber risk posture is a score based on a combination of a Prevent Compromise (PC) score indicative of an ability to prevent network compromise, a Data Loss (DL) score indicative of an ability to prevent data loss a Lateral Movement (LM) score indicative of an ability to prevent lateral movement, and an Asset Exposure (AE) score indicative of an ability to reduce an attack space;
• determining inputs for a Monte Carlo simulation to characterize financial losses of the organization due to a cyber event in a predetermined time period based on (1) an associated industry of the organization, (2) a size of the organization, and (3) the current cyber risk posture of the organization;
• performing a plurality of trials of the Monte Carlo simulation utilizing the inputs;
• and
• displaying a risk distribution curve based on results of the plurality of trials where the risk distribution curve plots a curve of losses versus a probability.