Asset & Device Management
Control
Status
ICT Device Compliance (MDM, encryption, antivirus)
Neuro+ ensures ICT device compliance through comprehensive security measures. The organisation implements a Mobile Device Management (MDM) solution where all devices must be enrolled and maintained throughout their lifecycle. Specific security standards include mandatory device encryption, approved antivirus protection, secure lock screens, and remote wipe functionality. This is supported by clear acceptable use guidelines, data protection requirements, and strict physical security practices that all personnel must follow.
Control of Information Assets
Neuro+'s Asset Management Policy, ICT Security Policy, Information Classification System (ICS), and Change Control Procedures demonstrate that Neuro+ has established comprehensive management responsibility for controlling information assets. The Business Owner has primary management responsibility for each information asset, including ensuring proper inventory and registration, determining classification based on the ICS, defining and approving access rights, authorising changes through the change management process, ensuring appropriate security controls are implemented, and conducting regular reviews. This responsibility is supported by a robust framework of policies and procedures, with the System Manager handling day-to-day operations, the IT Department maintaining the asset register and providing technical support, and all changes being controlled through a structured process that requires Business Owner approval.
Secure Disposal of Assets
Neuro+ maintains a framework for the secure disposal and reallocation of information assets and media. The policy demonstrates compliance with information security requirements through detailed procedures covering all aspects of asset management, from classification and risk assessment to specific disposal methods for various media types. The policy establishes clear roles and responsibilities, with oversight from the CISO, and includes procedures for both internal reallocation and final disposal of assets.