In the ethical hacking and security process, it is not true that all assets (which add value to an organization) are considered to have equal value for an organization: not all assets are as valuable as others, and not all are potential threats that can be used by hackers to cause harm.
