Hello :)
I am currently working on implementing the NIST 800-53 for my employer.
Regarding the RA-9 control:
I don't quite understand the criticality analysis. Can someone give me examples of what critical system components are? We are currently considering carrying out this criticality analysis only for the plan and design phase in the SDLC. What would be good examples of critical components here?
Is there an overview or framework for these critical components?

Thanks in advance!