Patent 9239908 was granted and assigned to EMC on January, 2016 by the United States Patent and Trademark Office.
A method and system is used in managing organization based security risks. Organization based information is analyzed for information that is suitable for use in attacking a user in the organization. The organization based information comprises user access information. Publicly available information is analyzed for information that is suitable for use in identifying the user within the organization. Based on the analyzes, there is derived a risk score for the user.