"In an information security policy statement we could say Information is an asset and the property of the company and all employees are responsible for protecting that asset." . . . . .