1. A method of determining an impact of a selected data element on enterprise security, comprising: retrieving data comprising a set of data elements for risk analysis; receiving for each of a plurality of impact factors in the analysis, a set of value bands, each value band representing a predetermined range for an impact factor and an associated value, wherein the impact factors comprise: at least one risk factor associated with a measure of a magnitude of a risk to the enterprise attributable to the at least one risk factor; at least one impression metric magnitude factor associated with a measure of a magnitude of an impression metric on the enterprise; for each impact factor for a selected data element from the set of data elements: determining the value band range that matches the value of the data element; and obtaining the value associated with the determined value band; receiving a set of assessment type weights for a selected assessment type, wherein each weight in the set of assessment type weights pairs with a corresponding at least one risk factor or at least one impression metric magnitude factor of the plurality of impact factors; and determining an element impact for the selected data element according to the selected assessment type by: applying the set of assessment type weights to the obtained values for the impact factors to calculate at least one risk factor score corresponding to the at least one risk factor and at least one impression metric magnitude factor score corresponding to the at least one impression metric magnitude factor; and calculating the element impact as the product of the at least one risk factor score and the at least one impression metric magnitude factor score.