Categories used to classify organizational assets, which commonly include:
People – employees, contractors, vendors, and external service provider personnel
Technology – servers, workstations, mobile devices, network equipment, applications, databases, and virtual systems
Facilities – offices, data centers, server rooms, manufacturing sites, and secured areas
External Service Providers (ESPs) – third-party people, technologies, or facilities such as cloud providers, managed service providers, and managed security service providers