The organizational resource that is being protected; can be logical, such as a Web site, software information, or data, or can be physical, such as a person, a computer system, hardware, or other tangible objects.