A system for evaluating and mitigating cybersecurity risk, the system comprising:
- a non-transitory computer-readable medium storing a plurality of risk models for identifying cybersecurity risks to computing infrastructure components based at least in part on answers to a set of multiple-choice questions;
- and
- processing circuitry configured to perform operations comprising
- conducting, via network communications with one or more network-connected computing devices remote to the system, a set of interactions with one or more users associated with an entity, the set of interactions comprising
- sending, for display to one or more of the one or more users, the set of multiple-choice questions, and
- obtaining information from the one or more of the one or more users regarding a computing infrastructure of the entity, the information including a set of answers responsive to the set of multiple-choice questions presented by the system to the one or more of the one or more users,
- using the information, applying at least one model of the plurality of risk models to identify one or more cybersecurity risk levels for the entity, each cybersecurity risk level corresponding to a respective cybersecurity risk of one or more cybersecurity risks,
- using the one or more cybersecurity risk levels and the information, calculating at least one enterprise score for the entity,
- determining, based at least in part on the information, at least one target score,
- identifying, based on the one or more cybersecurity risks, one or more mitigation options, as part of the set of interactions, wherein
- the one or more mitigation options comprise at least one cybersecurity insurance product, and
- identifying the one or more mitigation options comprises
- a) for each respective mitigation option of a plurality of mitigation options applicable to at least a portion of the one or more cybersecurity risks, evaluating at least a portion of the set of answers to determine a service score quantifying relevance of the respective mitigation option to the computing infrastructure of the entity, and
- b) selecting, based on service scores of the plurality of mitigation options, the one or more mitigation options,
- accessing commercial terms for each mitigation option of at least a portion of the one or more mitigation options,
- preparing, for presentation on a display, user interface information comprising the at least one enterprise score, the at least one target score, and the one or more mitigation options, wherein the user interface information includes
- for each respective mitigation option of the one or more mitigation options, a mitigation option description,
- for each respective mitigation option of the portion of the one or more mitigation options, the commercial terms, and
- for a first cybersecurity insurance product of the at least one cybersecurity insurance product, a user interface element configured to enable user access, via an application programming interface (API), to a third party system of a provider of the first cybersecurity insurance product, wherein
- the API enables purchasing the first cybersecurity insurance product within a navigational architecture of a platform providing a user interface,
- sending, for display as the user interface to at least one user of the one or more users, the user interface information,
- receiving, from the at least one user of the one or more users, a selection of at least one mitigation option of the one or more mitigation options, wherein receiving the selection comprises
- receiving, via the user interface, an indication of interaction with the user interface element,
- calling the third party system via the API using credentials recognized by the third party system,
- responsive to the at least one user purchasing the first cybersecurity insurance product, applying one or more models of the plurality of risk models to calculate, using the at least one mitigation option, revised cybersecurity risk levels for the entity,
- using the revised cybersecurity risk levels, calculating at least one revised score, and
- as part of the set of interactions, sending, to the at least one user of the one or more users, the at least one revised score for dynamically updating the at least one enterprise score in the user interface.