Assign a business impact rating to assets in the Quantum-Safe Security app to
prioritize PQC migration based on risk exposure, compliance requirements, and business
continuity needs.
| Where Can I Use This? | What Do I Need? |
|---|
Asset criticality refers to how important an asset is to your
organization's operations. Identifying your most critical assets helps focus your
post-quantum cryptography (PQC) migration efforts. You can use this context to build
a prioritized remediation roadmap, allocate resources strategically, and track risk
reduction for critical assets.
Key criteria to evaluate when assessing criticality are:
You can classify assets in the Quantum-Safe Security app as
High or
Standard business impact.
Standard is the default. Business impact ratings account
for differences in risk exposure. For example, in a
Harvest Now, Decrypt Later attack, threat
actors target assets handling sensitive, long-lived data such as financial records
or protected health information (PHI). Classifying those assets as High ensures the
inventory more accurately reflects their risk and your operational priorities.
Depending on the asset type, you can configure criticality in two ways:
The method you apply last takes
precedence. For example, if a rule designates an asset as High business impact and
you later manually set business impact to Standard, the Standard rating
persists.
To see the current rating for an asset, check the Business Context:
Impact column of the inventory. The Business Context:
Tag column displays the App-ID category, user group, or other source
driving the rating. This column is blank if you have not configured rule-based
criticality.
