A computerized process useful for automating Risk Identification, Quantification, Benchmarking and Mitigation in an enterprise computer system, includes the step of integrating an enterprise security, privacy and compliance system in an enterprise computer system. The enterprise security, privacy and compliance system monitors a set of risk sources. The method includes the step of implementing an identification and a weighted scoring of a set of risks associated with each risk source. The method includes the step of, with a specified machine learning technique, matching a set of similar risk inputs with an associated weight. The set of similar risk inputs are similar to the risk sources in the RPPBM practice. The method includes the step of monitoring the relevant enterprise systems for changes in risk levels of each risk source. The method includes the step of generating a risk-score number for each risk source. The risk-score number is used to avoid a subjective assessment of the risk source.