Within the context of risk management, any collection, set, or database of information or any asset that collects, stores, processes, or transmits information of value to the organization.