1.Understand how your organisation identifies and values information (such as through an Information Asset Register). 2.Understand how Information Asset Owners (IAOs) have a duty to exploit their assets for the public good, as well as protect them and manage their risks.