// GLOSSARY

Crown Jewel (Critical Target)

A critical data asset, privileged identity or business-process component tied directly to the organization's business objective, whose compromise by an attacker produces a high-business-impact outcome. The traditional approach dissipates attention trying to protect every asset; the critical-target concept instead prioritizes the defense and focuses the test. It is the starting parameter of Objective-Based Red Team scenarios (RT-2) and the destination of lateral movement in the Assumed Breach Simulation (RT-3). What counts as a critical target is not a technical decision but a business one: the question 'what, if lost, stops the business; which data, if leaked, collapses reputation or compliance' is answered together with management. An offensive engagement run without this definition produces findings but cannot prioritize them. 'Critical target' is preferred in Turkish copy.