12.2.1 The relevant entities shall establish, implement and apply a policy for the proper handling of …

Requirement

The relevant entities shall establish, implement and apply a policy for the proper handling of assets, including information, in accordance with their network and information security policy and shall communicate the policy on proper handling of assets to anyone who uses or handles assets.

Guidance

• Ensure that employees, direct suppliers, service providers and any other third parties who use or handle the entity’s assets (101) are aware of the policy.
• Consider mobile devices, such as smartphones and tablets, and determine a strategy for mobile device management, including Bring-Your-Own-Device (BYOD) (102).

Examples of evidence

• Policy on the proper handling of assets .
• User manuals or instructions provided to employees, direct suppliers, service providers and any other third parties who use or handles the entity’s assets.
• Documentation showing that employees have completed training sessions on the asset handling policy.
• Forms or electronic records that employees, direct suppliers, service providers and third parties have signed to acknowledge they have read and understood the policy.

1. Áttekintés

1.1 Hivatkozások

1.2 Azonosított követelmények

1.3 Kapcsolódó szabályozások

2. Azonosított követelmények

3. Kapcsolódó szabályozások

Kapcsolt feladatok

• ENISA -