ISO 27001 5.11 Return of Assets

Requirement

"Personnel and other interested parties as appropriate shall return all the organization’s assets in their possession upon change or termination of their employment, contract or agreement."[1]

Explanation

To prevent the loss of organization data/information and equipment all organization provided equipment shall be collected from terminated personnel. In general the person's manager is responsible for collecting equipment. Remote personnel can mail it in to the IT team.

References

  1. ISO/IEC 27001

Need help putting this into practice? See our ISO 27001 compliance services or read our ISO 27001 articles.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo

See LakeRidge in action.

Loading the booking calendar…