12. Asset management (Article 21(2), point (i), of Directive (EU) 2022/2555)

12.1.   Asset classification

12.2.   Handling of assets

12.3.   Removable media policy

12.4.   Asset inventory

12.5.   Deposit, return or deletion of assets upon termination of employment

The relevant entities shall establish, implement and apply procedures which ensure that their assets which are under custody of personnel are deposited, returned or deleted upon termination of employment, and shall document the deposit, return and deletion of those assets. Where the deposit, return or deletion of assets is not possible, the relevant entities shall ensure that the assets can no longer access the relevant entities’ network and information systems in accordance with point 12.2.2.