Protecting assets

Follow this guidance to protect your organisation’s assets when they’re away from the office.

Add to your asset management register

Include assets used by people working away from the office in your asset management register, even when the value of the assets is below the threshold you normally apply to control assets.

Permit removal only when necessary

Only allow your people to remove assets from your facilities if they are necessary for performing their out-of-the-office duties.

Assign custody

Assign custody of each asset to an individual before you allow the asset to be removed from your premises. And consider requiring people to sign for equipment before taking it.

Brief your people and implement security measures

Advise your people of their responsibilities for safeguarding any assets entrusted to them. Ensure they know about your security measures and how to uphold them.

Make sure your people know and follow your incident reporting procedures for assets that are lost or damaged. Treat as compromised any information contained in misplaced, lost, or stolen physical assets.

Protecting assets in vehicles

Tell your people not to leave assets in vehicles unless it is unavoidable or physical security measures are in place to protect the vehicle and its contents.

Protecting assets in hotels

Remind your people that assets left in hotel rooms or hotel safes will be at risk, particularly when travelling overseas. Ensure you evaluate and treat the risks before your people depart to stay at a hotel.

Protecting assets in planes

When travelling, assets in carry-on luggage are more secure than checked-in baggage, providing the carry-on luggage remains in the employee's control.

For more information, go to Security zones.

Protecting assets in private facilities

You may not be able to control the security of assets located in client premises, even when given a dedicated work space. In that case, evaluate the risks to your assets in a similar way to any other unsecure off-site work environment.

If you have assets that are used to regulate the client's activities, those assets may need extra protection. For example, when you need to protect assets from tampering or other actions that would compromise your regulation activities.

Page last modified: 4/05/2022