Information Assets

Information assets include data itself, as well as the software and infrastructure used to process, store, or transmit it.

Examples range from databases and file stores to application code, reports, and analytics systems. Classifying information assets helps organizations identify what needs protection and which controls apply.

Many frameworks expect organizations to maintain inventories of information assets as part of their risk management process.