“Measure the risk of the asset. This can be done using basic critical, high, medium, and low ranking but should also consider the crown jewels present and any other risk vectors like vulnerabilities. Each of these metrics will help weight the asset score. If you are looking for a standardized starting place, consider Common Vulnerability Scoring System (CVSS) and Environmental metrics.”