What is the best value that should be assessed when evaluating the worth of an information asset to the organization – replacement cost or lost income while repairing or replacing?  What is the likelihood value of a vulnerability that no longer requires consideration? Cite resources and references that can support your assertions.

---

I actually think that when assessing the worth of an information asset, both are equally important. An information asset that is key to how a company earns it’s income must be protected at all costs. If it is stolen, corrupted, or advancements are made that render it obsolete, it will damage not only the company reputation, but its income at the same time until a replacement is found, or the asset is updated. To go along with that, the resources and manpower that might be required to replace or update the asset might cost the company just as much, if not more than the lost revenue due to it being out of commission and unavailable for a period of time. (Twin, 2022) This represents a “double whammy” in terms of setbacks for a company.

If a vulnerability no longer requires consideration, it should be set at a low priority, but not entirely forgotten about. It should still be remembered, and maintained, but at a much lower rate than more common, or vulnerable places in a network.

Source:

Twin, A. (2022, October 5). What is replacement cost and how does it work? Investopedia. Retrieved October 19, 2022, from https://www.investopedia.com/terms/r/replacementcost.asp