Study on Business Action-based Asset Model and Assets Identification of Information System

It is the basis and one key for evaluating and managing the risk of information systems to identify the concrete assets. On the basis of the analysis on the purpose and task of information systems, the business action-based association assets (A(3)) model is put forward in this paper. The index system to evaluate the importance of assets and the procedure to find the key assets are presented to select those key assets as the object of information system risk evaluation and management. Finally, this method is validated through the risk evaluation of a medical treatment facility information system.