US 12,321,462 B2
Cybersecurity risk assessment system and method
Kevin T. Coppins, Lutz, FL (US); Liam Irish, Temple Terrace, FL (US); Spencer Vore, Broomfield, CO (US); and Cory Retherford, Bloomington, IN (US)
Assigned to Spirion, LLC, Tampa, FL (US)
Filed by Spirion, LLC, Tampa, FL (US)
Filed on Nov. 15, 2022, as Appl. No. 17/987,350.
Claims priority of provisional application 63/279,251, filed on Nov. 15, 2021.
Prior Publication US 2023/0153443 A1, May 18, 2023
Int. Cl. G06F 21/00 (2013.01); G06F 21/57 (2013.01); G06F 21/62 (2013.01)
CPC G06F 21/577 (2013.01) [G06F 21/6245 (2013.01); G06F 2221/033 (2013.01)] 15 Claims
OG exemplary drawing
 
1. A computer-implemented method for determining a cybersecurity risk score of information technology (IT) infrastructure, the method comprising:
receiving results from a sensitive data scan of IT infrastructure of an organization, the results including indications of a volume of sensitive data found during the scan, types of the sensitive data found during the scan, and locations at which the sensitive data was found during the scan; and
determining a cybersecurity risk score for the IT infrastructure of the organization, wherein determining the cybersecurity risk score includes calculating the cybersecurity risk score based on the volume of sensitive data found during the scan, value of the sensitive data found during the scan, and vulnerability of the locations at which the sensitive data was found during the scan; and wherein the value of the sensitive data found during the scan represents relative worth to the organization of the sensitive data, determining the cybersecurity risk score includes parsing out data from the results of the sensitive data scan and applying weighting coefficients in calculating the cybersecurity risk score, and the weighting coefficients applied include vulnerability coefficients for the locations at which the sensitive data was found during the scan and value coefficients for the types of the sensitive data found during the scan.