According to the Department of Energy, organizations manage their IT and OT assets, including both hardware and software, commensurate with the risk to the critical infrastructure and organizational objectives. Because of the nature of assets and industries, you should handle IT and OT assets differently.
Baseline types are filters you can use to identify categories of assets. Baseline types allow you to categorize baselines based on the risk involved with any deviations from the acceptable baseline. Cyber Integrity provides the following default baseline types:
-
Low Risk
-
Medium Risk
-
High Risk
-
Safety Critical
You can create additional baseline types, and you can modify these default types. For more information about the assets to include in each baseline type, see Recommended Baseline Types for OT Assets and Recommended Baseline Types for IT Assets.