Methods, systems, and program product for analyzing cyber-attacks based on identified business impacts on businesses

A computer program product stored on a computer readable storage medium, which when executed by a computing system of a business, analyzes a plurality of cyber-attacks, the program product comprising:

• program code that detects each of the plurality of cyber-attacks attempted on the computing system of the business, each of the plurality of cyber-attacks targeting information systems stored on at least one information technology (IT) component of an infrastructure of the computing system of the business;
• program code that determines cyber-attack data relating to each of the plurality of cyber-attacks attempted on the computing system of the business;
• program code that identifies a business impact on the business for each of the plurality of cyber-attacks attempted on the computing system of the business, the identified business impact on the business for each of the plurality of cyber-attacks based on predetermined business impact data and the determined cyber-attack data;
• and
• program code that prioritizes the plurality of cyber-attacks attempted on the computing system based on the identified business impact on the business for each of the plurality of cyber-attacks attempted on the computer system.

A computing system of a business for analyzing a plurality of cyber-attacks, the computing system comprising:

• a cyber-attack data module that:
• detects each of the plurality of cyber-attacks attempted on the computing system of the business, each of the plurality of cyber-attacks targeting information systems stored on at least one information technology (IT) component of an infrastructure of the computing system of the business;
• and
• determines cyber-attack data relating to each of the plurality of cyber-attacks attempted on the computing system of the business;
• a predetermined business impact data module that identifies a business impact on the business for each of the plurality of cyber-attacks attempted on the computing system of the business, the identified business impact on the business for each of the plurality of cyber-attacks based on predetermined business impact data of the predetermined business impact data module and the cyber-attack data determined by the cyber-attack data module;
• and
• a cyber-attack prioritization data module that prioritizes the plurality of cyber-attacks attempted on the computing system based on the identified business impact on the business for each of the plurality of cyber-attacks attempted on the computer system.