Presented herein are techniques that facilitate prioritizing risk mitigation efforts for business-critical services and transactions through the incorporation of a business context into threat intelligence scoring. Under aspects of the presented techniques, traditional threat intelligence tools may be employed to evaluate the risk that is associated with an enterprise asset; the results of such an evaluation may then be augmented with an enterprise-assigned business value for the asset to derive the asset’s business risk; and such a business risk may be leveraged to prioritize risk mitigation efforts, may be combined with other business risks, etc. The above-described process may be referred to herein as Business Risk Management (BRM).
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.
Birdsall, Randy; Foley, John A.; Nadiminti, Chandra Mohan Babu; Sivasubramanian, Girish; and Raithatha, Dhruv H., "IDENTIFYING ENTERPRISE RISK BASED ON BUSINESS CONTEXT WITH THREAT INTELLIGENCE", Technical Disclosure Commons, (September 12, 2023)