Information system assets

Asset is anything of a value to the organization.

Identification of assets is the first step of security. If we do not know what should be protected we cannot protect it.

• Reliability - property of ensuring intended behavior
• Availability - being accessible and usable as planned
• Accountability - property of ensuring that the actions of a certain entity can be traced to this entity

• • absent safeguards
  • physical mechanisms (cryptographic keys)
  • logical safeguards
    • human (human-human and human-machine interactions)
    • security services
    • security mechanisms (cryptographic algorithms)