search menu icon-carat-right cmu-wordmark

Information Asset Profiling

Technical Note
In this 2005 report, the authors describe IAP, a documented and repeatable process for developing consistent asset profiles.
Publisher

Software Engineering Institute

CMU/SEI Report Number
CMU/SEI-2005-TN-021
DOI (Digital Object Identifier)
10.1184/R1/6574418.v1

Abstract

The steadily increasing technical and environmental complexity of today's globally networked economy presents many obstacles to organizations as they attempt to protect their information assets. Information assets are constantly processed and combined to form new information assets. The line between ownership and custodianship of information assets blurs as information freely flows throughout an organization and often crosses outside organizational boundaries to other entities such as partners, customers, and suppliers. The CERT Survivable Enterprise Management group at the Software Engineering Institute developed the Information Asset Profiling (IAP) process as a tool to help organizations begin to address these security challenges. 

The authors describe IAP, a documented and repeatable process for developing consistent asset profiles. They also explain how the development of an information asset inventory using the IAP process provides a strong basis for organizations to begin to identify and address their information security needs.

Cite This Technical Note

Stevens, J., Caralli, R., & Willke, B. (2005, June 1). Information Asset Profiling. (Technical Note CMU/SEI-2005-TN-021). Retrieved February 29, 2024, from https://doi.org/10.1184/R1/6574418.v1.

@techreport{stevens_2005,
author={Stevens, James and Caralli, Richard and Willke, Bradford},
title={Information Asset Profiling},
month={Jun},
year={2005},
number={CMU/SEI-2005-TN-021},
howpublished={Carnegie Mellon University, Software Engineering Institute's Digital Library},
url={https://doi.org/10.1184/R1/6574418.v1},
note={Accessed: 2024-Feb-29}
}

Stevens, James, Richard Caralli, and Bradford Willke. "Information Asset Profiling." (CMU/SEI-2005-TN-021). Carnegie Mellon University, Software Engineering Institute's Digital Library. Software Engineering Institute, June 1, 2005. https://doi.org/10.1184/R1/6574418.v1.

J. Stevens, R. Caralli, and B. Willke, "Information Asset Profiling," Carnegie Mellon University, Software Engineering Institute's Digital Library. Software Engineering Institute, Technical Note CMU/SEI-2005-TN-021, 1-Jun-2005 [Online]. Available: https://doi.org/10.1184/R1/6574418.v1. [Accessed: 29-Feb-2024].

Stevens, James, Richard Caralli, and Bradford Willke. "Information Asset Profiling." (Technical Note CMU/SEI-2005-TN-021). Carnegie Mellon University, Software Engineering Institute's Digital Library, Software Engineering Institute, 1 Jun. 2005. https://doi.org/10.1184/R1/6574418.v1. Accessed 29 Feb. 2024.

Stevens, James; Caralli, Richard; & Willke, Bradford. Information Asset Profiling. CMU/SEI-2005-TN-021. Software Engineering Institute. 2005. https://doi.org/10.1184/R1/6574418.v1