Methods, systems, and articles of manufacture consistent with the present invention provide for managing and predicting risk for computer-based systems. Information about a computer-based system is asynchronously received. A risk level at which the computer-based system operates is calculated based on the received information.