1. A method comprising: discovering multiple devices in a computing system by a risk manager system; grouping the multiple devices into multiple security zones by a rules engine of the risk manager system using a risk management database that stores rules and data identifying cyber-security risks; generating a risk value identifying at least one cyber-security risk for the devices of one of the security zones by the risk manager system; comparing the risk value to a threshold by the risk manager system; and automatically generating a notification for one or more users by the risk manager system in response to the risk value violating the threshold.