What term refers to something with value, either tangible or intangible, that needs protection?

• A. Stakeholder
• B. Asset
• C. Risk tolerance
• D. Risk universe

Answer: (B)

The concept being tested is identifying what is considered something of value that requires protection in risk management. An asset is anything valuable to the organization, whether tangible or intangible. Tangible assets include hardware, facilities, and equipment, while intangible assets cover data, software, intellectual property, and brand or reputation. Because these items have value, they need safeguards against threats, vulnerabilities, and potential loss, with the level of protection guided by how critical or valuable the asset is.

The other terms describe people or groups with an interest (stakeholders), the level of risk an organization is willing to tolerate (risk tolerance), or the overall set of risk categories considered (risk universe). None of these terms refers to something that inherently has value and requires protection in the way that an asset does.