82
PhysiCal seCurity and safety
Company Equipment
A policy for equipment control should state the authorizations needed
to remove property from the premises, for example:
All company equipment is marked with an identification tag and must
be checked out before leaving the facility. e employee must have the
approval of a supervisor to remove property from the facility.
Information Security
Information security, whether hard copy or digital matter, should be
secured by users and steps taken to guard against theft or compro-
mise, for example:
All documents shall be secured at the end of the workday by placing all
files in the workroom. e workroom shall be closed and locked at the
normal close of business.
Documents shall not be left exposed on any de ...