Certified Incident Handler (CIH) Practice Ecam

Which policy focuses specifically on securing and tracking organizational resources?

1. Data protection policy

2. Asset control policy

3. User access policy

4. Incident response policy

The correct answer is: Asset control policy

The asset control policy is specifically designed to secure and track organizational resources, such as hardware and software assets. This policy outlines the procedures for managing assets throughout their lifecycle, from acquisition and deployment to disposal. Its primary focus is on maintaining an accurate inventory of assets, ensuring that they are properly secured, and tracking their usage to prevent loss or unauthorized access. By having a robust asset control policy in place, organizations can mitigate risks associated with asset mismanagement, such as theft, misuse, or compliance violations. This policy also supports other security efforts by providing the necessary information to assess vulnerabilities and implement effective controls for safeguarding critical resources.