Holistic enterprise risk control systems and methods

A method, comprising:

• receiving a selection of a risk from a node graph displayed in a graph dashboard of a user interface, wherein the risk is in a computing environment and is associated with a risk rating;
• receiving a plurality of controls associated with the computing environment, wherein the plurality of controls comprise a first subset of controls associated with the risk and a second subset of controls not associated with the risk;
• prioritizing the plurality of controls using a plurality of control attributes corresponding to each control in the plurality of controls, wherein the plurality of prioritized controls includes some or all controls in the first subset of controls and the second subset of controls;
• determining, using a simulation, a plurality of control sets from the plurality of prioritized controls that improve the risk rating;
• and
• selecting one of the plurality of control sets as a recommended control set to improve the risk rating of the risk.

A graph visualization system, comprising:

• at least one memory;
• and
• at least one processor coupled to the at least one memory and configured to:
• generate a node graph comprising a plurality of nodes and edges, wherein the nodes represent risks and controls, the edges represent relationships and weights among the risks and the controls, the risks are associated with a computing environment, and the controls mitigate the risks in the computing environment;
• display the node graph on a graph dashboard of a user interface of a computing device;
• receive a selection of a node from the node graph, wherein the node corresponds to a risk;
• initiate a simulation identifying a recommended control set that reduces a risk rating of the risk to a new risk rating;
• and
• display an updated node graph with the recommended control set for the risk and information associated with at least one control in the recommended control set.