We manage information as an asset that needs to be covered against reduction and unauthorised access