1. A method comprising: discovering multiple devices in a computing system by a risk manager system; grouping the multiple devices into multiple security zones by the risk manager system; for each security zone, causing one or more devices in that security zone to provide information to the risk manager system identifying alerts and events associated with the one or more devices; and storing the information, by the risk manager system, in association with unique identifier values, the unique identifier values identifying different types of information.