What must be accurately documented regarding key business assets?

In the context of managing and responding to security incidents, accurately documenting the criticality of key business assets is essential. Criticality refers to the importance of an asset to the operation of the business and its overall goals. By understanding which assets are critical, an organization can prioritize its response strategies effectively, ensuring that the most important resources are protected and restored first during or after an incident.

Documentation of criticality helps in assessing potential impacts in the event of a security breach or incident. It allows the security team to evaluate how the loss or compromise of an asset might affect business operations, financial stability, and reputation. This prioritization aids in the efficient allocation of resources during an incident response, as well as in planning preventive measures for the future.

Other factors, such as early containment, priorities, and current valuation, are important aspects of incident response but do not encapsulate the foundational understanding of which assets are most vital to the organization's function as essentially as criticality does. Documenting criticality ensures a clear understanding of how to tailor responses and recovery efforts around what truly matters to the business.