# Asset Valuation Backlink: [[Domain 1 - Index]] **Definition:** Determining the importance and monetary value of assets to prioritize protection. ## Key Facts - Value types: intrinsic, replacement, market, operational, regulatory. - Includes data, systems, processes, facilities, reputation. - Drives classification, control selection, and BIA priorities. - Consider dependencies and single points of failure. - Use inventory with owners and criticality; update with change. - **Verify:** check official (ISC)² CBK and current exam outline. >[!tip] **Exam Relevance** - Identify which assets require strongest controls - Use valuation to justify safeguards >[!note] **Mnemonic** - “Value → Vigilance.” ### Example Q: Small server hosts payroll DB. Which has higher value? A: Data (payroll), not the hardware. ## Revision Checklist - [ ] List 3 valuation types - [ ] Tie valuation to classification - [ ] Maintain owner/inventory fields - [ ] Link valuation to BIA/DR priority ## Related [[Data Classification and Handling]] · [[Business Impact Analysis (BIA)]] · [[Quantitative Risk Assessment]] · [[Risk Management Process]] · [[Security Roles and Responsibilities]] #cisSP #domain-1 #concept