ASSET MANAGEMENT POLICY
Legal name of the entity
Effective Date
Policy Owner Name or role (for example IT) Basis
ISO/IEC 27001 A.5.9 to A.5.11 SOC 2 This policy ensures information and technology assets are inventoried, owned, classified, securely configured and disposed of safely.
1. Purpose and scope
This policy applies across Legal name of the entity and is owned by Name or role (for example IT) . It covers hardware, software, cloud and information assets.
2. Controls
Asset controls in place:
Control In place Maintained asset inventory No Defined asset ownership No Classification by sensitivity No Secure baseline configuration No Endpoint encryption No Secure end-of-life disposal No
3. Review and approval
Reviewed [cycle]; approved by Name and designation on [date].
Approved by
Name and designation
______________________
Policy Owner
Name or role (for example IT)
______________________