ID.AM-05 involves prioritizing assets—data, hardware, software, and services—based on their classification, criticality, resource needs, and mission impact. This process defines criteria to rank assets, ensuring that those most vital to organizational objectives receive focused protection. Regular updates keep priorities aligned with changing conditions.

This subcategory enables efficient resource allocation by directing cybersecurity efforts toward high-value assets, reducing the risk of mission disruption. It supports strategic planning by linking asset importance to risk management decisions. ID.AM-05 ensures that protection efforts match organizational priorities.