You can associate an asset with a pre-defined Asset Criticality value. This value is optional. The value displays for any risks that are discovered on the device, which can assist you with risk mitigation planning.
- Sign in to the Risk Dashboard.
- In the navigation menu, click Assets.
- Optional: Use Filters to limit the number of assets that appear on the page.
- In the Asset Catalog, select the checkbox next to each asset you want to update.
- Click
Update Selected.
The Update Selected Assets dialog appears.
- In the Asset Criticality list, select one of these options:
- Unassigned — The default value for all devices.
- None — Defer risk remediation, for example, because these assets are not interconnected with business systems.
- Low — Defer risk remediation until higher-priority tasks are completed. These assets are unlikely targets for malicious activity, or have negligible negative impact if compromised.
- Medium — Monitor for risk escalation. These assets have moderate negative impact if compromised.
- High — Isolate and limit asset use until remediation. These assets have short-term compensating controls available, or are interconnected with external systems.
- Critical — Remediate risks immediately. These assets are likely targets for malicious activity.
- Click Update Asset(s).
Tip:
You can edit asset criticality for multiple assets at the same time.
See Edit assets for more information.