Setting criticality level tags
Organization of Assets in a Hierarchical Format
Using tags to classify assets based on their importance or criticality is a strategic approach in Privileged Access Management (PAM). This allows prioritization security efforts, streamline access management, and comply with regulatory standards. Critical assets (e.g., databases with sensitive customer data) require more stringent access controls than non-critical assets (e.g., public-facing servers).
Tags like "High-Criticality" or "Low-Criticality" help allocate resources efficiently by focusing advanced protection measures (e.g., multifactor authentication, session monitoring) on the most critical assets. During a security incident, tags help identify and isolate critical assets faster, minimizing the potential damage. Tags provide context for risk assessments by categorizing assets by their importance. High-criticality assets can be flagged for regular penetration testing or security reviews.
Adding Criticality Levels allows you to customize the criticality factor of the assets according to the business context. You can assign criticality-level tags based on your environment's settings.
For example, the assets like production environment database and security devices such as firewalls can be defined as highly critical assets.
It helps to track the assets in the organization, in case you want to identify or report assets according to the impact they have on the business.
Steps to configuring criticality level tags
To define a criticality level tag in Sectona PAM, follow below recommended steps:
Login to the system and click on Platform Configuration from the product navigator
Navigate to Criticality Levels under Common Masters section.
Click the +Add Criticality Level button. This will open up a form where you can define your criticality levels.
Select the criticality level for your organization's assets as per the requirement to either Critical, High, Medium, or Low.
Click on Save to define the criticality level within the Sectona Platform.
Criticality level tags can be assigned to any asset in your IT infrastructure. For more information, refer to asset management and asset discovery.