Glossary · Information security
Asset
Anything of value to an organisation that needs protection, such as data, systems, people, or facilities.
Put the term into practice: ISMS software
In information security, an asset is anything worth protecting because it has value to the organisation. Assets include information, software, hardware, services, people, and intangibles such as reputation.
An inventory of assets is foundational: you cannot assess risk to something you have not identified. Each asset typically has an owner who is accountable for its protection.
