What questions might be asked to help identify and classify information assets? Which is the most important question to ask?
What name is given to the process of assigning a comparative risk rating to each specific information asset?
What are the uses of such a rating?