Critical Asset
What is Critical Asset?
An information asset, system, or resource whose compromise, loss, or failure would have a severe impact on the organization's operations or objectives.
Frameworks that govern critical asset
What the standards actually require on critical asset
Requirements naming critical asset across 6 standards, quoted from the control text.
The software contains security controls that counter the attacks identified against it.
pci-ssf::4.2 · Secure Software Standard 4.2 (Critical Asset Protection) →This anti-pattern is present when log data from critical assets stays only on the asset and is not centralised; to attain the level it must be absent.
australian-energy-sector-cyber-security-framework-aescsf::SITUATION-AP6 · SITUATION-AP6: Anti-pattern: critical asset logs stored only on the asset →Assets that are critical to service capability are identified, and their reliability and availability are maximised to support business needs: critical assets are identified using the configuration management system, the SLAs and the definitions of services;
cobit-2019::BAI09.02 · BAI09.02 Manage critical assets →Backups cover critical technology and information assets. The guide lists databases, applications, servers and network devices as the minimum scope, with backup frequency set by sensitivity.
saudi-nca-ecc::2-9-3-1 · 2-9-3-1 Backups cover critical assets →Identify the critical system assets that support essential mission and business functions.
fbi-cjis-security-policy::CP-2(8) · CP-2(8) Contingency Plan | Identify Critical Assets →Contingency Plan | Identify Critical Assets. Identify critical system assets supporting [Selection: all; essential] mission and business functions
CP-2(8) · Contingency Plan | Identify Critical Assets (CP-2(8)) →Questions people ask about critical asset
What is Critical Asset?
Why is Critical Asset important for compliance?
Which compliance frameworks address Critical Asset?
Where can I learn more about Critical Asset?
See how Critical Asset applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.