Systems and methods for autonomous cyber risk remediation

A system configured to:

• aggregate network data associated with assets comprised in a network, wherein the assets are associated with an organization;
• extract defect features associated with the assets based on control data associated with the network and asset data associated with the assets;
• extract threat features related to the organization, an industry associated with the organization, or the assets;
• determine risk information respectively associated with the assets based on the extracted threat features and the extracted defect features;
• generate a network graph based on the aggregated network data and the risk information, wherein each node in the network graph represents a respective asset comprised in the network;
• perform an automated analysis of the network graph;
• and
• generate a task plan based on performing the automated analysis of the network graph, wherein in generating the task plan, the system is configured to prioritize individual assets or sets of connected assets in a defined neighborhood of the network.

An apparatus comprising:

• a memory having computer readable instructions and one or more processors for executing the computer readable instructions, wherein the computer readable instructions, when executed by the one or more processors, cause the apparatus to:
• aggregate network data associated with assets comprised in a network, wherein the assets are associated with an organization;
• extract defect features associated with the assets based on control data associated with the network and asset data associated with the assets;
• extract threat features related to the organization, an industry associated with the organization, or the assets;
• determine risk information respectively associated with the assets based on the extracted threat features and the extracted defect features;
• generate a network graph based on the aggregated network data and the risk information, wherein each node in the network graph represents a respective asset comprised in the network;
• perform an automated analysis of the network graph;
• and
• generate a task plan based on performing the automated analysis of the network graph, wherein in generating the task plan, the apparatus is configured to prioritize individual assets or sets of connected assets in a defined neighborhood of the network.