In the second modelling step you "identify your high-value asset." What kinds of things count as high-value assets, and why focus on them?

High-value assets are the systems and processes that produce value or money — e.g. a customer database, web portal, payment process, reconciliation, a SWIFT gateway, the production/operational-technology (OT) process, an ERP or HR system, or logistic planning.

The point is to find the crown jewels: what, if breached or stopped, would actually hurt the business. WHY focus narrowly: you cannot defend everything equally. By naming a handful of genuinely high-value assets (a SWIFT payment gateway in a bank, the OT production line in a factory), you can concentrate scarce defensive investment where a loss would cost the most — operationally, financially, or in safety. This is the "protect what matters most" principle in practice.