Explain what constitutes a critical asset in protection planning and name two criteria for its designation.

• A. Critical asset is essential to mission continuity; criteria: impact on mission if compromised; value or sensitivity of data.
• B. Critical asset is any asset needed for daily operations.
• C. Critical asset is any asset with encryption.
• D. Critical asset is essential to mission continuity; criteria: impact on mission if compromised, regulatory implications.

Answer: (D)

In protection planning, a critical asset is one whose failure or compromise would jeopardize essential operations. The two criteria used to designate this status are: first, the impact on the mission if the asset were compromised—how severely it would disrupt operations, safety, or service delivery; second, the regulatory implications—whether a compromise would trigger legal, contractual, or compliance penalties and obligations. These criteria ensure that assets are prioritized not only for their role in sustaining operations but also for the legal and regulatory risks they carry. For example, an asset that enables a critical service and whose loss would halt operations clearly meets the essential criterion, and if its failure would attract regulatory penalties or mandatory reporting requirements, it also satisfies the regulatory implications criterion.