1. A method executed by one or more computing devices for determining an impact of a data element on enterprise security, comprising: analyzing, by at least one of the one or more computing devices, information retrieved over a computer network from one or more enterprise databases which store the data element to determine a plurality of impact values of the data element, wherein the plurality of impact values correspond to a plurality of impact factors and wherein the plurality of impact factors comprise one or more risk factors and one or more impression metric factors; receiving, by at least one of the one or more computing devices, for each of the plurality of impact factors, a plurality of value bands, each value band indicating a risk value corresponding to a predetermined range of impact values of that impact factor; mapping, by at least one of the one or more computing devices, the plurality of impact values to a plurality of risk values based at least in part on the plurality of band values for each impact factor in the plurality of impact factors; receiving, by at least one of the one or more computing devices, a plurality of weights corresponding to an assessment perspective, wherein each weight in the plurality of weights pairs with a corresponding impact factor in the plurality of impact factors; and determining, by at least one of the one or more computing devices, an element impact for the data element according to the assessment perspective by: applying the plurality of weights to the plurality of risk values to calculate a plurality of weighted risk values; and calculating the element impact as a product of the plurality of weighted risk values.