The information system may be rated asset by asset (plus dependencies) or by security domains.

You are always requested to rate the essential information and services.


valuation / assets + dependencies

the value is distributed according to dependencies between assets.



valuation / assets + domains

PILAR follows these steps:

    1. she aggregates the value of all elements of class essential information, and the aggregated value is transferred to all essential service elements
    2. she aggregates the value of all elements of class essential service, and the aggregated value is transferred to all support assets


Domain valuation is faster, while dependencies are more precise.


valuation / mix: assets + dependencies + domains

if the asset has dependencies, use them to get value; otherwise, by domain.