DETERMINATION OF CYBERSECURITY RECOMMENDATIONS

A method and apparatus can include a system controller and a system processor. The system controller can retrieve a cybersecurity dataset from at least one database, the retrieved dataset including information associated with at least one element associated with at least one of network traffic and process monitoring of at least one process being implemented in at least one network element. The system processor can utilize multidimensional nonlinear manifold clustering on the at least one element of the retrieved cybersecurity dataset, assign a threat entity formulated from the at least one element of the retrieved dataset into a cybersecurity threat hyper-volume based on the multidimensional nonlinear manifold clustering, and formulate a recommended action to be taken based on the assignment of the threat entity into the cybersecurity threat hyper-volume.