This is a fundamental concept of information management. Without a comprehensive identification of your company's information and supporting technical assets, it would be impossible to tell if they are being protected effectively.

You should be able to identify clearly your assets, their relative value and their importance. With this information you can provide levels of protection appropriate to the value and importance of the assets.

Examples of assets are:

1. Information assets, e.g., databases, archived information
2. Software assets, e.g. application software, system software
3. Physical assets, e.g. computer equipment, communications equipment, media
4. Services, e.g. general utilities such as heating and lighting.