Prioritization

Prioritizing Assets aka Crown Jewels

1. Anything (applications, infrastructure) related to safety.

2. Money incoming (applications and infrastructure involved in all processes related to enabling funds to come in): payments from clients, other sources.

3. Money outgoing (applications and infrastructure involved in all processes related to enabling money to come in): salaries, payments to suppliers.

4. Operations: (line of business apps which are used in key processes for which your organization is ultimately getting paid for)

5. Other apps storage solutions with sensitive data (like trade secretes)

6. Other apps storage solutions with privacy-protected data (mostly HR and payroll systems which are not covered yet by the previous groups)

7. Compliance (if your org has to meet some standards or voluntarily committed to some)

8. Other LoB apps

9. Generic apps (email, SharePoint, File Exchangers)

10. Networking (VPNs)

11. Partner and Vendor connections

12. Infrastructure and Everything else

References

1. Prioritizing Your Crown Jewels for Cybersecurity | by Ivan Fedorets | Medium (ivancyber.com)