Using an Entity Reputation When Calculating an Entity Risk Score

A system comprising:

• a processor;
• a data bus coupled to the processor;
• and
• a non-transitory, computer-readable storage medium embodying computer program code, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations and comprising instructions executable by the processor and configured for:
• monitoring a plurality of electronically-observable actions of an entity, the plurality of electronically-observable actions of the entity corresponding to a respective plurality of events enacted by the entity;
• converting the plurality of electronically-observable actions of the entity to electronic information representing the plurality of actions of the entity;
• identifying an anomalous event from the plurality of events enacted by the entity;
• generating a first event risk severity score based upon the anomalous event;
• generating a second event risk severity score based upon a historical entity risk function, the historical entity risk function providing an indication of historical security risk of the entity;
• generating an entity risk severity score for the entity, the generating using the historical entity risk function and the event risk severity score;
• performing a risk-adaptive prevention operation, the risk-adaptive prevention operation using the entity risk severity score, the risk-adaptive prevention operation adaptively responding to mitigate risk associated with the anomalous event.

A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for:

• monitoring a plurality of electronically-observable actions of an entity, the plurality of electronically-observable actions of the entity corresponding to a respective plurality of events enacted by the entity;
• converting the plurality of electronically-observable actions of the entity to electronic information representing the plurality of actions of the entity;
• identifying an anomalous event from the plurality of events enacted by the entity;
• generating a first event risk severity score based upon the anomalous event;
• generating a second event risk severity score based upon a historical entity risk function, the historical entity risk function providing an indication of historical security risk of the entity;
• generating an entity risk severity score for the entity, the generating using the historical entity risk function and the event risk severity score;
• performing a risk-adaptive prevention operation, the risk-adaptive prevention operation using the entity risk severity score, the risk-adaptive prevention operation adaptively responding to mitigate risk associated with the anomalous event.