Computer software programs for monitoring information technology systems and identifying and assessing the security risks in business applications