An organization's critical assets can include patient information, financial records, intellectual property, operational technology, and research data.

### Why this is right The course material lists these as examples of critical assets. Identifying them helps an organization determine what must be protected and what creates business value. ### The concept Critical assets are not limited to computers or physical equipment. They can include information, intellectual property, and operational technology. The asset list should reflect the organization's activities. A hospital may focus on patient information, while a manufacturer may need to consider operational technology and intellectual property. ### Terms - **Intellectual property**: Information or creations with value to an organization. - **Operational technology**: Technology associated with operating or controlling organizational processes. - **Critical asset**: Something important to protect because it supports business value or operations. ### Remember Start framework selection by asking what the organization must protect and what creates value.