OT Asset Criticality Scoring Matrix (Excel)

The OT Asset Criticality Scoring Matrix operationalizes the principle of risk-informed prioritization by translating qualitative asset attributes into comparable numerical scores. Each asset is evaluated across standardized criteria—including Safety Impact, Production Impact, Environmental & Regulatory Impact, Cybersecurity Impact (e.g., exploitability, data sensitivity), and Redundancy/Recovery Time—using calibrated 1–5 or 1–10 ordinal scales. Domain experts (e.g., automation engineers, safety officers, cybersecurity analysts) collaboratively score assets, applying organization-specific weighting factors that reflect strategic priorities—for example, mines may assign higher weight to safety and environmental impact than to data confidentiality. The matrix computes a normalized Criticality Score (typically 0–100) that categorizes assets into tiers (e.g., Critical, High, Medium, Low), directly informing decisions on patching cadence, network segmentation, monitoring intensity, and incident response planning. Its Excel format supports traceability (via comment fields and audit logs), scenario modeling (e.g., 'what-if' weight adjustments), and export to CMDB or ICS risk dashboards, making it both pragmatic for frontline teams and auditable for regulatory compliance (e.g., NIST SP 800-82, ISA/IEC 62443, or local mining safety standards).