1. A method of operating an advisement system to provide security actions in a computing environment comprising a plurality of assets, the method comprising: identifying a security incident for an asset in the computing environment; identifying a criticality rating for the asset, wherein the criticality rating is based at least on data stored on the asset and an importance of the asset to one or more other assets in the computing environment; obtaining enrichment information for the security incident from one or more internal or external sources; identifying a severity rating for the security incident based on the enrichment information; determining one or more security actions based on the enrichment information; identifying effects of the one or more security actions on operations of the computing environment based on the criticality rating and the severity rating, wherein identifying the effects of the one or more security actions comprises determining whether the asset will be accessible to other assets for each of the one or more security actions; identifying a subset of the one or more security actions to respond to the security incident based on the effects of the one or more security actions; and initiating implementation of at least one security action in the subset of the one or more security actions in the computing environment.