Information Asset Management Guidelines
All information assets shall be handled securely to maintain the required level of confidentiality, integrity, and availability.
An Organization shall maintain a set of guidelines in order to achieve this,
- Information Asset owners shall be identified for all information assets.
- Information asset inventory shall be maintained by the information asset owner.
- Sufficient records shall be maintained to locate and navigate information assets as and when required by authorized parties.
- All information assets shall be stored and disposed of securely as per the information classification level.
- All assets shall be returned at the change of employment status (transfers, promotions, resignations, terminations, retirements, secondments, etc.) or long duration of leave as per the procedure defined by the HR department.
- The physical security of information assets shall be ensured by the Asset Custodian and/or Asset Owner as applicable.
No comments:
Post a Comment