Skip to content
OT principles
ASD Essentials

Essentials for OT

IDE-02 Business criticality rating identification

one actionNot in enterprise IT

Work out which OT is vital: the critical systems you cannot accept having offline for an extended period. Then record everything vital OT depends on to work, including systems and services outside OT.

Reviewed 18 October 2026 · Current to ASD's Essentials for OT, published 15 October 2026

The principle

Business criticality ratings for systems (infrastructure, operating systems, applications and data) are identified and documented.

ASD, Information Security Manual (ISM), Principle IDE-02

The action

ASD's actions are quoted as published in Essentials for OT. ASD has not given them IDs, so they are numbered by position.

  1. Action 1 of 1

    Identify and document vital OT, and the enabling systems and services on which vital OT depends, including those located outside the OT environment.

    In plain English: Find and record your vital OT, the OT you cannot accept having offline for long. Also record the systems and services it depends on, including any outside OT.

    Domains
    Visibility and response

See all 34 principles in Essentials for OT, or read our OT guide.

Sources

The ASD publications this page quotes.

Quoted ASD material © Commonwealth of Australia 2026, licensed under CC BY 4.0.

Everything else on this page is written by Control Stack.