SYSTEM AND METHOD FOR CONTENT-INDEPENDENT DETERMINATION OF FILE-SYSTEM-OBJECT RISK OF EXPOSURE

In one embodiment, a method is performed by a computer system comprising computer hardware. The method includes monitoring a file system for risk-assessment events. The method further includes, responsive to a real-time determination of at least one risk-assessment event, determining a content-independent risk of exposure for a file-system object associated with the risk-assessment event. The determining of the content-independent risk of exposure is based, at least in part, on a depth of the file-system object in the file system and a set of users who can access the file-system object.