1. A computer network auditing method, comprising: deploying agents on respective computers among a plurality of computers throughout a network; using the agents to collect information about the type of data stored on the respective computers and the programs running on the respective computers; receiving the information from the agents at a central location; for each computer for which the information has been received, calculating a risk score, where the risk score is based on the type of data stored on said each computer and a security of said each computer; comparing, at the central location, calculated risk scores of multiple computers and ranking the multiple computers in a risk score order; and for a given one of the multiple computers in the risk score order, performing a remediation technique that has the effect of reducing the risk score for the given computer.