5.11 Return of Assets

Personnel and other interested parties should return all the organisation’s assets in their possession upon change or termination of their employment, contract, or agreement.

To help the organisation protect company assets (both tangible and non-tangible) after changing or termination of employment contract/agreement.

It is in the best interest of the organisation to have a formal process to be able to retain and protect company-related assets when an employee leaves the company. In most cases, tracking and retaining devices such as user endpoint, portable storage, token keys, smart cards, and so forth is easier. However, some organisations struggle to ensure that company’s digital assets have been retained upon employment termination especially when employees use their own devices to access the company’s digital assets. This control suggests that organisations should formally have a process to prevent employees from accessing company-related assets upon their termination.