XXX data and information is of value to business operations - Rationale Data and information is used to improve the performance of XXX and the services provided to travelers. It is therefore an asset and is therefore controlled, secured and managed like other business assets: based on risk assessment and cost consideration. - Implication Data and information is managed adequately, with the measures appropriate to the value assigned and the risk associated with it.