Security Risk Aggregation, Analysis, and Adaptive Control

Methods and apparatuses, including computer program products, are described for transaction-based security risk aggregation and analysis. A server computing device receives security risk data elements from a plurality of data sources, the data elements corresponding to a transaction submitted by a remote computing device to the server computing device for execution. The server computing device aggregates the security risk data elements into a weighted risk matrix. The server computing device generates a risk score for the submitted transaction based upon the weighted risk matrix. The server computing device determines an internal environment risk factor and an external environment risk factor based upon environmental risk data received from the plurality of data sources. The server computing device adjusts the risk score for the submitted transaction based upon the internal environment risk factor and the external environment risk factor, and determines a disposition for the transaction based upon the adjusted risk score.