*5.1. Asset Analysis*

The asset analysis of NAS, as described in Appendix B.1, lists ten constituent assets of NAS which are categorized into components of hardware, software, and data. Hardware assets are NFC-enabled mobile devices and NFC tags, while software assets of NAS are the two NFC-enabled mobile applications and the database operation web application. As described in the system overview of NAS, the data model of NAS is indeed based on four types of data assets: data of, wine pedigree, transaction history, supply chain, and unsuccessful records.

The (1) *NFC tags (A04)*, (2) *transaction history data (A06)* of a wine record, and the (3) *backend database (A10)*, which is solely managed by winemakers, storing all sorts of data components listed in the asset analysis, are among the three most probable system components susceptible to security risks according to ratings assigned to each component of confidentiality, integrity and availability (the CIA methodology).
