a$.$ Need of the protection of information assets:

$$ Malicious actors within the organization

$$ The possibility of an outside attack

$$ In order to protect from natural disasters