SPD is data generated or used by Security Protection Assets (SPAs) to protect the OSA’s environment. An example is aggregated logs within a SIEM, where the SIEM is the SPA and the logs constitute SPD. Both the SPA and its associated SPD fall within the assessment scope.