Information Asset
What is Information Asset?
Any data, system, or resource that has value to the organization and requires protection based on its classification level.
Terms that appear alongside information asset
Each of these is named in at least one of the same controls as information asset. The number is how many controls name both.
- risk assessment 3 shared controls
- asset inventory 3 shared controls
- security officer 3 shared controls
- information security 3 shared controls
- ciso 2 shared controls
- risk reporting 2 shared controls
- configuration management database cmdb 2 shared controls
- risk committee 2 shared controls
Frameworks that govern information asset
What the standards actually require on information asset
Requirements naming information asset across 6 standards, quoted from the control text.
Each inventoried information asset is assigned a category under documented criteria, one of which is its importance to delivering the function.
australian-energy-sector-cyber-security-framework-aescsf::ASSET-2c · ASSET-2c: Information assets categorised by defined criteria →To keep an accurate and complete view of its IT environment the FI should identify the information assets (data, hardware and software, including those entrusted by customers or third parties, leased, or used by service providers to serve the FI) that support...
monetary-authority-of-singapore-technology-risk-management-guidelines::3.3 · 3.3 Management of Information Assets →The entity classifies its information assets, including those that related or third parties manage, by criticality and sensitivity. The rating has to reflect how far a security incident involving the asset could harm, financially or otherwise, the entity itsel...
apra-cps-234::20 · Para 20 Classify information assets by criticality and sensitivity →The bank identifies and maps the confidentiality, integrity and availability classification of information assets according to their criticality to operations.
rbi-cybersecurity-framework-for-banks::36 · Para 36: security classification of information assets by criticality →Entities under Article 16(1) must identify, classify and document all critical or important functions, the information and ICT assets supporting them and their interdependencies, review that classification as needed, and identify all critical or important func...
dora-rts-on-ict-risk-management-framework-commission-delegated-regulation-eu-2024-1774::30 · Article 30: Classification of information assets and ICT assets (simplified framework) →Set procedures to manage information assets (information systems and external system services such as outsourcees and cloud, their hardware, software and stored data, and networks) across their lifecycle (acquisition, use, storage, disposal) and review them as...
japan-fsa-cybersecurity-guidelines-for-financial-institutions::2.2.1-B · 2.2.1 Information asset management: basic actions →Questions people ask about information asset
What is Information Asset?
Why is Information Asset important for compliance?
Which compliance frameworks address Information Asset?
Where can I learn more about Information Asset?
See how Information Asset applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.