These information assets can be protected as follows:

$$ Security awareness training.

$$ Data encryption.

$$ Regular security audit

$$ Implementing security contract

$$ Access control