1. A method of remote management comprising: receiving, by a global system, security data from a plurality of assets; generating, by the global system, at least one security metric for each asset according to an evaluation of the security data from the asset; receiving, by the global system, change effort estimates for the plurality of assets; computing, by the global system, change recommendations for risk reduction according to the change effort estimates and security metrics for the plurality of assets; and displaying the change recommendations.