| 主权项 |
1. A method of assessing a risk level of an enterprise using cloud-based services from one or more cloud service providers, the method comprising:
receiving, at a hardware processor, cloud service provider information characterized by a plurality of attributes, each attribute being associated with a plurality of attribute values, each attribute value being associated with a point value; for each cloud service provider, assessing, at the processor, the attribute point value for each attribute based on the cloud service provider information; aggregating, at the processor, the attribute point values for all of the plurality of attributes associated with each cloud service provider; generating, at the processor, a provider risk score for each cloud service provider based on the aggregated attribute point values associated with the cloud service provider; receiving, at the processor, network event data from a data network associated with the enterprise, the network event data relating to network data traffic between the data network and the one or more cloud service providers; correlating, at the processor, the network event data to the one or more cloud service providers; generating, at the processor, one or more cloud service usage analytics based on the network event data and the cloud service provider information associated with the cloud service providers correlated to the network event data; generating, using the processor, a risk score for the enterprise based on the provider risk scores for the cloud service providers correlated to the network event data and based on the cloud service usage analytics indicative of the cloud service usage behavior and pattern of the enterprise, the risk score being indicative of the risk of the enterprise relating to the use of the cloud-based services from the one or more cloud service providers; and generating, at the processor, an output comprising a remediation means based on the risk score generated for the enterprise. |
