Skip to content

Asset Criticality

Definition

A pre-assigned score or label that records how important a system, service, or data set is to the organisation. Used during triage to weight the severity of an incident: the same attack pattern on a critical asset receives a higher severity than the same pattern on a low-value host.

Purpose
Weights incident severity by system importance
Typical scale
Low/medium/high or numeric tiering
Set by
Pre-incident risk assessment, not during triage
Used in
Incident prioritisation and response SLA assignment

Common questions

Why does the same malware alert get different severity on different hosts?+

Triage combines the technical indicator (e.g. malware detected) with the pre-assigned criticality of the affected asset. The same detection on a domain controller or payment server escalates faster and gets a higher severity label than the identical detection on a low-value test machine.

How often should asset criticality ratings be reviewed?+

Ratings should be revisited when a system's role changes, such as a test server being promoted to production or a service absorbing new sensitive data, because a stale rating causes triage to consistently under- or over-prioritise incidents on that asset.

Related terms

Alert Fatigue
The condition in which analysts receive more alerts than they can meaningfully review, leading to delayed responses, dismissed true positives, and reduced...
Escalation Threshold
A defined criterion, based on severity level, asset type, or indicator type, that triggers handoff of an alert from a first-tier analyst...
False Positive
A test result that indicates the presence of a target analyte when it is absent. In forensic serology this may mean incorrectly...
Severity Matrix
A two-dimensional scoring tool that combines technical impact and business impact to assign a severity level to a confirmed incident. Outputs are...
Triage
The structured process of evaluating an alert to determine whether it is a genuine security incident and, if so, what severity level...

Explained in

Your journey to becoming a forensic professional starts here.

Practice with mock tests, learn from structured notes, and get your questions answered by a global forensic community, all in one place.