Information Asset Owners are directly accountable to the SIRO and must provide assurance that information risk is being managed effectively in respect of the information assets that they “own.” In this regard, IAOs may be assigned ownership of several assets of their organization that may include components reused in other IAO assets of other IAO (hardware and software).
