What term describes any enterprise asset that helps to achieve IT goals?

• A. Resource (IT)
• B. Risk awareness program
• C. Threat actor
• D. Vulnerability assessment/analysis

Answer: (A)

The fundamental idea here is identifying what we call something of value that helps the organization reach its IT objectives. In IT risk management, assets are anything valuable to the organization, and when we’re talking about technology specifically, those assets are referred to as resources (IT). These resources can include hardware, software, data, networks, and the people and processes that enable IT capabilities. They’re the things you protect, optimize, and rely on to achieve IT goals.

A risk awareness program, on the other hand, is about educating people about risk. A threat actor is someone who causes or attempts to cause harm. A vulnerability assessment/analysis is a process used to identify weaknesses. None of these describe an asset that directly supports IT objectives, whereas a resource (IT) directly fits that description.