An information asset is any information of value to a company and its operation. Information assets, like any other assets of a company, must be protected to ensure that the company's operation meets expectations, and to ensure that there is no discontinuity in operations. All the information assets of the operation must be registered when information security is implemented. These assets can be either intangible assets, or tangible assets such as housing, computer equipment and furniture. Intangible assets include business connections, reputation, procedures, services, knowledge and human resources.

Risk Management Studio® offers a module for managing information assets. Furthermore, the system offers the option of transferring information assets from other systems to Risk Management Studio®.