1. A method for evaluating a system having at least one portal, the method comprising: examining the at least one portal to identify at least one accessible portal; performing a qualitative analysis responsive to said at least one accessible portal; performing a quantitative analysis responsive to said qualitative analysis; and generating a risk profile responsive to said performing a qualitative analysis and said performing a quantitative analysis.