Severity of weaknesses or deficiencies regarding an asset and usage is identified via risk appreciation | Notion

screen:

How to identify an asset’s weakness
How to define an asset’s managed informations with its CIA requirements