INTRODUCTION TO ASSETS

A risk is anything that can impact the confidentiality, integrity, or availability of an asset.

The rogue device is a threat because it is negatively impacting the company's assets.

This data is confidential. Confidential assets such as this customer survey data can only be accessed by those working on a specific project.

Asset classification is the practice of labeling assets based on sensitivity and importance to an organization.

Security risk planning involves the analysis of three elements: assets, threats, and vulnerabilities. An asset is an item perceived as having value to an organization, such as a cash register and the money inside it. Security risk planning involves the analysis of three elements: assets, threats, and vulnerabilities. A threat is any circumstance or event that can negatively affect assets, such as a burglar stealing money from a cash register. Security risk planning involves the analysis of three elements: assets, threats, and vulnerabilities. A vulnerability is a weakness that can be exploited by a threat, such as an unlocked door to a restricted area.

Restricted assets are often highly sensitive and considered need-to-know.