Exam CISSP topic 1 question 305 discussion

B. Information assets include any information that is valuable to the organization.

The correct answer is B. Information assets include any information that is valuable to the organization. Explanation: Information assets are any data, information, or knowledge that holds value for an organization. These assets can include documents, databases, software applications, intellectual property, and more. Properly managing and protecting information assets is critical for organizations to maintain their competitive advantage, ensure regulatory compliance, and mitigate risks. Incorrect answers: A. International Organization for Standardization (ISO) 27001 compliance specifies which information assets must be included in asset inventory: While ISO 27001 provides guidelines for managing information security, it does not specify which specific information assets must be included in the inventory. Organizations must determine their inventory based on their unique needs and risks.

must be included makes Answer A bad

Goodwill and reputation are not information, and yet they're assets.

ISO27002, as the supporting standard to ISO27001, in its introduction echos the ISO27000 definition with “information and related processes, systems, networks and personnel involved in their operation, handling and protection are assets that, like other important business assets, are valuable to an organization’s business“. https://blog.blackswansecurity.com/2020/04/what-are-information-assets/