In DSAC-11 Annex B risk management, an asset is defined as what?

• A. Only data stored electronically
• B. Any information, system, or resource valuable to the organization that requires protection
• C. Only physical hardware components
• D. Only personnel records

Answer: (B)

Assets in risk management are anything valuable to the organization that requires protection. This broad view means you’re protecting more than just data stored electronically; it includes information, systems, and other resources that support operations and have value. So an asset can be data, the information systems that process or store that data, hardware, software, facilities, or even intangible things like personnel and reputation. The key idea is that protection is needed for anything the organization relies on and values. This is why the definition that covers information, systems, or resources valuable to the organization is the best fit.