In security, what are the three types of assets commonly protected?

• A. Information, property, and people.
• B. People, property, and information.
• C. Security, privacy, and compliance.
• D. Assets, risks, and threats.

Answer: (B)

The fundamental idea is that security protects three broad kinds of resources: people, property, and information. People are the foundation—safety and security of all individuals involved, from employees to customers, since without people there’s no operation to protect. Property covers the physical things you rely on—buildings, equipment, infrastructure, and other tangible assets that must be kept safe from harm or theft. Information covers the data and intellectual property you rely on to function—databases, software, confidential files, and the knowledge stored and transmitted by your systems. Together, these three categories capture what most security programs are built to defend: the human element, the physical world, and the data that runs and informs the organization. The other options mix goals or risk concepts with assets, which aren’t asset types themselves.