Asset Criticality
Definition
A pre-assigned score or label that records how important a system, service, or data set is to the organisation. Used during triage to weight the severity of an incident: the same attack pattern on a critical asset receives a higher severity than the same pattern on a low-value host.
- Purpose
- Weights incident severity by system importance
- Typical scale
- Low/medium/high or numeric tiering
- Set by
- Pre-incident risk assessment, not during triage
- Used in
- Incident prioritisation and response SLA assignment
Common questions
Why does the same malware alert get different severity on different hosts?+
Triage combines the technical indicator (e.g. malware detected) with the pre-assigned criticality of the affected asset. The same detection on a domain controller or payment server escalates faster and gets a higher severity label than the identical detection on a low-value test machine.
How often should asset criticality ratings be reviewed?+
Ratings should be revisited when a system's role changes, such as a test server being promoted to production or a service absorbing new sensitive data, because a stale rating causes triage to consistently under- or over-prioritise incidents on that asset.
Related terms
- Alert Fatigue
- The condition in which analysts receive more alerts than they can meaningfully review, leading to delayed responses, dismissed true positives, and reduced...
- Escalation Threshold
- A defined criterion, based on severity level, asset type, or indicator type, that triggers handoff of an alert from a first-tier analyst...
- False Positive
- A test result that indicates the presence of a target analyte when it is absent. In forensic serology this may mean incorrectly...
- Severity Matrix
- A two-dimensional scoring tool that combines technical impact and business impact to assign a severity level to a confirmed incident. Outputs are...
- Triage
- The structured process of evaluating an alert to determine whether it is a genuine security incident and, if so, what severity level...