Tracking and network risk management of information technology assets and systems

A method comprising:

• accessing, by a risk assessment processing circuit, network element key features, and providing, by the risk assessment processing circuit, based at least in part on the accessed key features, assessment data associated with at least select ones of network elements forming a given managed information technology network, wherein, for each select network element among plural network elements in the network:
• (i) key features are accessed pertinent to a set of risk types, (ii) impact score is determined for each of the risk types, (iii) an overall score is determined for each of the risk types, and (iv) the overall score is determined for each of the risk types to a risk level, and the assessment data is determined to include the risk levels converted from the overall scores;
• causing, by a control circuit, controls pertaining to at risk network elements to be placed on the network in accordance with the assessment data;
• and
• holding, in assessment data storage, the assessment data associated with the assessed network elements.

A non-transitory computer-readable media encoded to cause:

• accessing, by a risk assessment processing circuit, network element key features, and providing, by the risk assessment processing circuit, based at least in part on the accessed key features, assessment data associated with at least select ones of network elements forming a given managed information technology network, wherein, for each select network element among plural network elements in the network:
• (i) key features are accessed pertinent to a set of risk types, (ii) impact score is determined for each of the risk types, (iii) an overall score is determined for each of the risk types, and (iv) the overall score is determined for each of the risk types to a risk level, and the assessment data is determined to include the risk levels converted from the overall scores;
• causing, by a control circuit, controls pertaining to at risk network elements to be placed on the network in accordance with the assessment data;
• and
• holding, in assessment data storage, the assessment data associated with the assessed network elements.