Systems and methods for determining asset importance in security risk management

A computer-implemented method for ranking importance of assets of an entity, the assets comprising hosts associated with the entity, the method comprising:

• receiving at least one of:
• a first dataset comprising (i) a respective plurality of hostnames of a plurality of hosts and (ii) lookup counts for each hostname of the plurality of hostnames, the lookup counts obtained from a stream of a domain name system (DNS) queries;
• or
• a second dataset comprising source code for a plurality of websites indicating, for each website, whether a host of the website is configured to collect data from users, the websites associated with the entity;
• determining input data based on the received at least one first dataset or second dataset such that:
• when the first dataset is received, determining a first input data comprising, for each host of the plurality of hosts, a ratio of (a) a number of lookup counts of the hostname of the host to (b) a maximum number of lookup counts of the plurality of hostnames for the entity;
• and
• when the second dataset is received, determining a second input data indicating, for each host of the website, whether the source code indicates that the host is configured to collect data from users of the web site;
• and
• determining, for each host associated with the entity, a host importance ranking based on the determined input data.