1. A method, comprising: determining an external infrastructure of an entity, the external infrastructure comprising one or more cyber assets utilized by the entity; collecting infrastructure information regarding the one or more cyber assets; performing passive cyber security vulnerability testing on the one or more cyber assets using the collected infrastructure information; assessing cyber security vulnerabilities of the one or more cyber assets based on the performing of passive cyber security vulnerability testing; calculating an association score for the one or more cyber assets based on the assessed cyber security vulnerabilities; and automatically recommending, based on the association score, computer network changes for the one or more cyber assets to reduce the assessed cyber security vulnerabilities.