Which outcome involves identifying and prioritizing assets relevant to the system and its stakeholders?

• A. The mission and business processes identified.
• B. Stakeholder assets identified and prioritized.
• C. Common controls identified.
• D. The information types identified.

Answer: (B)

Identifying and prioritizing assets that matter to the system and its stakeholders ensures protections focus on what truly matters. The best answer reflects that outcome because it explicitly covers both discovering what assets exist and ranking them by importance to those who rely on and are affected by the system. This prioritization guides where to invest resources, which controls to implement most strongly, and how to meet stakeholder needs and mission criticality.

Other options describe related ideas but not the full asset-focused prioritization: identifying mission or business processes is about understanding what the system enables, not which assets are most valuable; identifying common controls is about choosing protections rather than determining asset importance; identifying information types centers on data categories rather than the broader set of assets and their relative value.