An organizational resource that is being protected is sometimes logical$,$ such as a Web site, software information, or data. Sometimes the resource is physical, such as a person, computer system, hardware, or other tangible object. Either way, the resource is known as a$($n$)$

access method

asset

exploit

risk