Automated event-driven security assessment