Asset Identification and Valuation Questions

Focuses on identifying and valuing the things an organization must protect, including data, systems, infrastructure, services, and intellectual property. Topics include cataloging assets, mapping assets to business functions and critical processes, assessing asset value and impact in terms of confidentiality integrity and availability, prioritizing protection efforts through risk assessment and threat modeling, estimating potential business impact and cost of loss, and selecting appropriate controls and mitigation strategies. Also covers aligning asset criticality to compliance requirements and business priorities and explaining the rationale for prioritization in interviews.