Asset Criticality Criteria
The purpose of Asset Criticality criteria is to assess the relative importance of assets that are included as part of the scope of an assessment. Our methodology assumes that a risk cannot exist in the absence of assets, be they tangible (people, infrastructure etc.) or intangible (reputation, finances etc.), so the Asset Criticality stage is a keystone stage of the assessment.
Asset Criticality criteria is reasonably straightforward to construct and includes increasing levels of criticality, and accompanying statements, over multiple rows of the table.
You may create as many different sets of criteria as you need – different assessments often require slightly different approaches, especially in instances where an assessment is being completed for another organisation or scope.
Once an assessment has been completed, users will notice that the ratings applied to individual assets will appear automatically within the Threat/Hazard Assessment (under ‘Primary Assets at Risk’) and the Risk Register.