IDENTITY AND ASSET RISK SCORE INTELLIGENCE AND THREAT MITIGATION

摘要

Techniques are provided that produce a risk profile consisting of a risk score and trends of risk scores across entities such as user identities and other objects. For example, an identity is assigned a risk score which is based on baseline factors such as HR attributes, such as training and screening status; access to and conflicts across physical, logical, and operational systems; historical and current usage of these systems, as well as anomalies from normal behavior patterns. Techniques herein encompass the management of a risk profile (“behavior profile”) for each entity, e.g. identity, and maintains a risk score that is correlated with behavior, e.g. an individual's behavior, to track anomalies or irregularities in every day routines of the entity, e.g. individual.

主权项

1. A computer-implemented method for providing entity risk score intelligence, comprising the steps of:
receiving baseline scoring data at an entity warehouse, wherein the entity warehouse comprises a risk scoring and predictive analytics engine that provides entity risk score intelligence regarding an entity based in part of said baseline scoring data; performing, at the entity warehouse, ongoing monitoring of behavior and anomaly processes and data and of changes and behaviors processes and data that impact the entity risk score intelligence; and providing response and alerting; wherein one or more steps are performed on at least a processor coupled to at least a memory.