Any information processing system, service or service component (including applications and cloud services) or part of the physical / environmental or communication infrastructure which realises / supports the hosting, processing, storage, transfer or protection of information assets.There should be vulnerability assessments for the supporting assets, and identification of risks to take informed decisions and put in place appropriate measures, like to to reduce the risks to an acceptable level.
See Asset, Primary Asset, Information Asset, and IT Asset.