1. A method, comprising: accessing a first database comprising a plurality of first records wherein each first record comprises a computer identifier and a vulnerability data associated with the computer identifier wherein the vulnerability data provides a measure of cyber risk; accessing a second database comprising a plurality of second records wherein each second record comprises a user identifier and the computer identifier, wherein the user identifier is associated with a user authorized to access a computer associated with the computer identifier; accessing a third database comprising a plurality of third records wherein each third record comprises the user identifier and an associated organizational indication associated with a business enterprise, wherein the user identifier represents a name of a person associated with the organizational indication; and merging the first records, the second records and the third records to produce a fourth database comprising a plurality of fourth records wherein each fourth record comprises an organizational indication and an aggregate vulnerability indication based on associated vulnerability data, wherein the aggregate vulnerability indication comprises a total number of vulnerabilities associated with the organizational indication determined by: identifying matching third records having an associated organizational indication matching the organizational indication, extracting matching user identifiers from the matching third records, identifying matching second records having user identifiers matching the matching user identifiers, extracting matching computer identifiers from the matching second records; identifying matching first records having computer identifiers matching the matching computer identifiers, extracting matching vulnerability data from the matching first records, and summing the total number of vulnerabilities from the matching vulnerability data.