1. A method, comprising the steps of: accessing a first database comprising a plurality of first records wherein each first record comprises a computer identifier and a vulnerability data associated with the computer identifier wherein the vulnerability data provides a measure of cyber risk; accessing a second database comprising a plurality of second records wherein each second record comprises a user identifier and the computer identifier, wherein the user identifier is associated with a user authorized to access a computer associated with the computer identifier; accessing a third database comprising a plurality of third records wherein each third record comprises the user identifier and an organizational indication associated with a business enterprise, wherein the user identifier represents a name of a person associated with the organizational indication; and using the first records, the second records and the third records to produce a fourth database comprising a plurality of fourth records wherein each fourth record comprises at least one of either the name or organization indication and an aggregate vulnerability indication.