“Protect your assets!” is a mantra that is much used in information security. The term ‘asset’ is useful when applied to a specific business perspective. However, for managing security it does not fully cover the things that need protection. Indeed, the use of the term can easily make you overlook the things that need security measures. In this article, I argue that we should broaden our view, and start using the concept of ‘objects of security’, which is a mental model that can help us better understand security.