Return of assets

Why it matters

A departing employee still holding a laptop or access token is a live risk, not a paperwork gap.

How a self-led small team implements it

Add an asset-return step to your offboarding checklist — it's the single highest-leverage fix here.

What auditors expect to see

Offboarding checklist, asset return confirmation.

More organizational controls

• A.5.1 Policies for information security
• A.5.2 Information security roles and responsibilities
• A.5.3 Segregation of duties
• A.5.4 Management responsibilities