Use this self-assessment to identify what information and services are used by your company as part of its regular business activity. You will need to rate how business-critical your information is and how likely it is the information will be targeted. It is important to be realistic.
Inventory: Any information, service, or third-party with access to any information or a service. This may be your CRM (i.e. Salesforce), operational management tools (i.e. your project management system), storage services (Google Drive or Dropbox), or your business data (contact database/prospect list, order database, inventory reports, etc).
Controls: These are steps that have been taken to prevent unauthorized access and/or use to your information and services (your inventory).