A server generates a risk tier map based on risk inventory data for a subscriber. The risk tier map comprises a plurality of risk tiers. The server generates a custom risk model for the subscriber based on a plurality of risk factors. The plurality of risk factors can be configured based on subscriber data. The server executes the custom risk model to determine a risk score for one or more entities and determines a risk recommendation for the one or more entities using the entity risk score and the risk tier map.