Determining risk level and maturity of compliance activities

The system of claim 9, further comprising a grouping component that groups the intake compliance data into a first labeled set of compliance program data based on a comparison of a similarity value with a a similarity level threshold value.

A computer-implemented method, comprising:

• determining, by a system operatively coupled to a processor, a maturity level representing a state of compliance based in part on a comparison of a set of compliance program data or a set of remediation data to a set of requirement data;
• and
• generating, by the system, a risk score representing an estimated impact of threat data, vulnerability data, or non-compliance data on a set of protected information data based on a comparison of a first value corresponding to a maturity level to one or more values corresponding to a threshold maturity level, wherein threshold maturity level is based at least in part on a set of risk criteria.

A computer program product for facilitating a determination of a risk level associated with a compliance program, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to:

• determine a maturity level representing a state of compliance based in part on a comparison of a set of compliance program data or a set of remediation data to a set of requirement data;
• and
• generate a risk score representing an estimated impact of threat data, vulnerability data, or non-compliance data on a set of protected information data based on a comparison of a first value corresponding to a maturity level to one or more values corresponding to a threshold maturity level, wherein threshold maturity level is based at least in part on a set of risk criteria.