1. Purpose
Know which assets hold or provide access to Moogul information, who is responsible for them, and how they are protected throughout their use.
2. Scope
Company devices, work-related personal devices, cloud accounts and services, software, and information assets. These rules apply to everyone using or managing them for Moogul.
3. Inventory And Ownership
Maintain an asset inventory with each significant asset’s identifier, owner, location or service, information sensitivity, and lifecycle status. Update records when assets are added, reassigned, or retired; check them quarterly.
4. Safe Use And Handling
Use assets for approved work under the Information Security Policy and Access Control Policy. Protect devices from unattended public access, loss, and theft. Report missing or compromised assets immediately to the CEO through [email protected] or direct contact.
5. Asset Lifecycle
Approve assets before use and apply appropriate access and security settings. On departure or reassignment, recover company assets and remove access that is no longer needed. Before disposal or reuse, securely remove company information and credentials, preserving any required records. Record who completed the handover or disposal and when.
6. Responsibilities And Review
Asset owners maintain records and safeguards; users handle assets responsibly. The CEO and Security Review Team review this policy every six months. Exceptions and enforcement follow the parent Information Security Policy.