Automated risk assessment and management

A method for automated security processing, the method implemented in a non-transitory machine-readable storage medium as executable instructions that are processed by one or more processors configured to perform the method, comprising:

• assigning, by the one or more processors, base annotations to a resource identity associated with a resource in an enterprise data store and identifying the resource as a resource type that is one of:
• a service, a system, a device, a directory, a data store, a workflow, a workload, and combinations and collections thereof, and wherein assigning further includes assigning each base annotation as a name-value pair to the resource identity, each base annotation having a name portion that identifies an annotation type and a value portion, and identifying each name-value pair as one of:
• a business-value name and a business value, a threat-level name and a threat-level value, a threat-potential name and a threat-potential value, a role name and a role value, and an asset name and a risk value assigned to that asset name, each value assigned according to a predefined scale for the corresponding annotation type;
• performing, by the one or more processors, a number of iterations, the number of iterations is a depth of a hierarchy used for annotating assignments of enterprise resources and each iteration calculating new annotations using the value portions of the name-value pairs, and each iteration based at least in part on the value portions of prior annotations and the new annotations assigned to the resource identity in the enterprise data store, wherein for a first iteration the base annotations are the prior annotations, wherein the hierarchy is for available annotations within an enterprise, wherein calculating further includes summing the value portions for same annotation types during each iteration to arrive at revised total annotation type values;
• and
• monitoring, by the one or more processors, the enterprise data store for the resource identity based on the base annotations and the new annotations to perform one or more automated actions, wherein monitoring further includes dynamically changing security within an enterprise system for the resource type based on the revised total annotation type values and dynamically providing automated security processing.