A method includes configuring a service on a network, and generating infrastructure definitions that define one or more network topologies configured on the network to implement the service. The method also includes decomposing a service definition of the service into a subservice dependency graph to indicate a collection of subservices and dependencies between the subservices that collectively implement the service. The method further includes, based on the subservice dependency graph and the one or more network topologies defined by the infrastructure definitions, determining infrastructure elements configured in the network to implement the service. The method also includes generating a heatmap that maps the service against the infrastructure elements and that indicates, for the infrastructure elements, respective measures of criticality in a range from a high criticality to a low criticality.