| Key Assets | Information Type (NIST SP 800-60) | Confidentiality Impact level | Integrity Impact level | Availability Impact level |
| User login information and records | Personal Identity and Authentication | moderate | moderate | low |
| Backup storage | Continuity of operations | moderate | low | moderate |
| Cloud service | Services Acquisition | moderate | low | moderate |
| Internet Service provider | System and Network Monitoring | low | low | moderate |
| Policies and Procedures | Policy and guidance development | low | low | moderate |