1. A computer-implemented method for determining an objective security assessment for a network, the method comprising: determining computer assets in the network; determining an actual deployment of counter measures associated with the network, wherein the counter measures address potential security threats to the network; determining, by a processor, an overall security score for the network based at least in part on the actual deployment of the counter measures and an effectiveness of the counter measures; determining at least one recommendation for improving the overall security score; and outputting the at least one recommendation and the overall security score, wherein the overall security score comprises a security score of each of the counter measures associated with the computer assets, the security score of each of the counter measures being based at least in part on an actual effectiveness score that represents the actual deployment of each of the counter measures and a possible effectiveness score that represents a possible deployment of each of the counter measures, and wherein outputting the at least one recommendation and the overall security score further comprises outputting the security score of each of the counter measures deployed on the computer assets.