evsjv‡`k †M‡RU, AwZwi³, GwcÖj 6, 2014 12553 needs access to what information. There are many types of assets including but not limited to the following: a. databases and data files, contracts and agreements, system documentation including process, research information, user manuals, training material, operational or support procedures, business continuity plans, fallback arrangements, audit trails, and archived information; b. application software, system software, development tools, and utilities; c. computer equipment, communications equipment, removable media, and other equipment; d. computing and communications services; e. people, and their qualifications, skills, and experience; f. intangibles, such as reputation and image of the organization. (6) Information is created, processed, stored, archived, and deleted while executing business activities. Examples are database records, mails, source code, paper documents, designs, emails, databases, Process Data, images etc. (7) An information asset is a definable piece of information, stored in any manner which is recognized as 'valuable' to the organization. The most important and valuable information assets are those underpinning an agency’s core or most critical duties, capabilities or goals. The value of information assets is expressed in terms of the potential business consequences for events resulting in loss of confidentiality, integrity and or availability to them. Potential consequences include direct and indirect financial losses (immediate or subsequent), loss of revenue, failure to meet service obligations or reputational loss. Indirect consequences of a security failure also have to be considered. Information asset valuation can be done in terms of, a. Confidentiality of Information Asset; b. Integrity of Information Asset; c. Authenticity of Information Asset; d. Non-repudiation; and e. Availability of Information Asset. (8) Different State of Information As mentioned earlier information has different form of presence. It has different state as well. It is very important for an agency to consider those states while developing their policy for Information Security. Common states of information are: a. Information that’s been archived (Historical information)