A clear Asset Management Policy establishes the rules by which your organisation will identify and control all assets used in the course of business, including data, hardware, software, backup media, etc. The management of assets is an essential component of information security and ISO 27001 certification.