A water utility is standing up Advanced Risk assessments for operational-technology assets and needs likelihood and impact factors weighted for OT criticality. Where should those factors and weights live?
Select an answer to reveal the explanation.
Short Explanation
OT risk scoring needs a recipe card — which ingredients matter and how heavy each is. Put factors and weights in the advanced assessment methodology tuned for OT, not in private notebooks. Discovery probes and SIR playbooks are different kitchens.
Full Explanation
Advanced Risk assessment methodologies define the factors, scales, and weights used to score risks. OT environments often need criticality-aware factors distinct from generic IT scoring. Centralizing those settings in the methodology keeps assessments comparable; ad-hoc notebooks and unrelated modules do not.