Generally human, financial, physical and knowledge factors that provide a corporate the means to perform its business processes are considered as corporate resources. Information can be considered as the raw material used in producing each and every decision taken in an organization. Organizations need to decide regularly on what objectives to be achieved, what actions to be taken to achieve these objectives, how and when these actions are to be taken, and the resources to be used for all these activities.

Information is recognised as one of the most important corporate resources. It is a source of competitive strength as it enables the management to outmaneuver its business rivals at critical stages. **Information as a corporate resource has the following features:** 1. Information is a value added resource. Just as value is added to a product as it moves from raw material stage to final product, the same is true of conversion of data into infor­mation. 2. Information has a specific cost associated with it just as if it were acquired from market. Therefore, it is as essential to acquire and utilise information efficiently as it would be for any other resource. 3. Information is meant to be shared by all associated with the attainment of company’s common goals and they, in turn, con­tribute to the corporate stock of information. 4. Information is exposed to a variety of security risks. There­fore, it has to be protected by implementing appropriate secu­rity policies and procedures without hindering its seamless flow across its users. 5. Most of the information is organisation specific and its value depends upon its use by the decision maker. 6. It has a high rate of obsolescence and thus, it must reach the user as early as possible. Redundant part of this resource must be weeded out of the total stock of information.

Hie Uma, **INFORMATION AS A CORPORATE RESOURCE** **A. Security as Part of The Total Organization** Information security is not simply software or hardware security, and it does not stand apart from the total organiza­tion. An organization’s policies, plans and procedures may affect security needs, and security practices may affect those policies, plans or procedures. The important point is that a secure system is integral to the total organization. **B. Understanding The Organization** If a secure system is part of the total organization, then one must understand the organization, its goals, objectives, policies and procedures. If the objectives of an organization are unclear, then implementing new technology will not help. If procedures are not secure, then new technology will not make them secure. Understanding the organization is the first step in planning for a secure system. **C. Identifying Sensitive Data** After establishing a clear understanding of the organization’s function and how it is to complete its objectives, the first step in planning for and developing a secure system is to identify sensitive data. Recognize specific levels of se­curity and that each may not be equally valuable. Identifying sensitive data and determining their value before the fact is a most difficult task for any organization. Unfortunately for most Management Information Systems (MIS) di­rectors, management will more easily recognize the true value of data after the data have been disclosed to unautho­rized individuals and are compromised. **D. Controlled Sharing of Information and Resources** Sharing of information and resources is increasingly possible through increased networking, communications and connectivity. As this data sharing increases, the problem of information security increases exponentially. The prob­lem for management is one of encouraging increased productivity through technology while maintaining what will probably be an increasingly insecure system.

Generally human, financial, physical and knowledge factors that provide a corporate the means to perform its business processes are considered as corporate resources. Information can be considered as the raw material used in producing each and every decision taken in an organization. Organizations need to decide regularly on what objectives to be achieved, what actions to be taken to achieve these objectives, how and when these actions are to be taken, and the resources to be used for all these activities. These decisions are taken by all the people in the organization who work at different level of organizational hierarchy and handle different aspect of the organizational work. The exact decision that in individual takes varies from person to person and from time to time, depending on nature of organizational tasks being performed. Also some people need to do more of decision making as compared to implementing the decisions. But everyone in the organization needs has to takes some decisions for which availability of adequate information is critical. Information is also required to convey decisions taken to the people responsible for implementing the decisions taken, and for monitoring the actual results achieved as the work progresses. In want of information many decisions cannot be taken and in some cases it results into poor decisions. Therefore information is acting as a resource, which should be managed, so that needy people may get it in time when required. In this way information plays a role of corporate resource in every organization. Like any other resource it need to be formalized, must have some identified and systematize way of generation and dissemination Thanks