Mapping of Assets Requiring Protection

We help organisations identify, structure and assess information, information systems, objects, infrastructure and dependencies that may be of significance to national security interests or fundamental national functions (GNF). The mapping provides a documented basis for determining criticality and protection needs, prioritising further analyses and establishing an adequate level of security.

From public mission to specific assets and dependencies

We start from the organisation's public mission, tasks and deliverables and establish a traceable link from national security interests and GNF to specific processes, information, systems, objects, infrastructure, personnel and suppliers.

The assessment covers not only individual assets, but also shared components, concentration risk and dependencies across the organisation and the supply chain. Our multidisciplinary teams assess protection needs, time to impact and the possibility of replacing or restoring critical functionality.

The mapping and asset assessment may include

clarification of the organisation's public mission, regulatory framework and significance to national security interests and GNF
mapping of functions, sub-functions, critical deliverables and necessary functionality
identification of information and assessment of protection needs with regard to confidentiality, integrity and availability
mapping of case-handling, communication, control, management and other information systems that process or support assets requiring protection
identification of buildings, facilities, areas, means of transport, equipment and infrastructure that support critical functions
mapping of internal and external dependencies, including personnel, expertise, technology, energy, communications, data, locations and suppliers
damage assessment in the event of full or partial loss of function, reduced functionality, loss, alteration, unavailability, destruction or unlawful takeover
assessment of time to impact, the possibility of replacement or restoration, geographical and cross-sectoral knock-on effects, and uncertainty
preparation of an asset catalogue, asset matrix and dependency map with ownership, criticality, justifications and traceability
a basis for any designation and classification of objects and infrastructure requiring protection, as well as for further risk analyses, security objectives and measures

What does the organisation receive?

The organisation receives a verifiable picture of its assets, with clear ownership, criticality and dependencies. The deliverable may include an asset assessment, asset catalogue, asset matrix, dependency map and management summary. The material is designed for further use in security management, analyses, emergency preparedness and the prioritisation of measures.

← Back to Security Act and Risk Analysis

Submit the form below and we will get in touch with you.