1. A computer-implemented method for determining an objective security assessment for a network, the method comprising: determining computer assets in the network determining an actual deployment of counter measures associated with the network, wherein the counter measures address potential security threats to the network; determining, by a processor, an overall security score for the network based at least in part on the actual deployment of the counter measures and an effectiveness of the counter measures; determining at least one recommendation for improving the overall security score; and outputting the at least one recommendation and the overall security score.