Control guide
Chain of Custody for Retired IT Assets
The issue is not whether assets were collected. The issue is whether the business can prove what happened after control was transferred.
What acceptable custody should prove
- What assets were released and who authorised the pathway
- Who had control, where and under which batch record
- What processing action occurred for each asset
- Whether the final processed list reconciles to the released list
- How missing, mismatched or damaged items were resolved