Asset Management

Physical Asset Inventory

Internally tracked computing equipment includes, but is not limited to:

• workstations and laptops

• mobile devices

• external or removable hard drives

Each record includes details of the physical device such as manufacturer, model as well as ownership details.

The movement/transfer of computing hardware and electronic media is maintained as part of the records, including media re-use and ownership reassignment.

Tidepool IT is responsible for ensuring each new asset/resource has an up-to-date record in the IT asset management system.

All company-owned devices are subject to a complete data wipe if deemed necessary, such as in the case of device infection or re-purpose. This data wipe will be carried out or documented by the IT Security Engineer or their delegate.

Digital Asset Inventory

Tidepool uses automation and supplemental processes to store detailed records of all company assets:

• Compute Assets (virtual and physical assets)

• Automated Functions and Integrations

• Source and Application code

• Data Sources

• Documents, Shares, and Endpoints

• User accounts, roles and permissions

• Identify Providers

Paper Records

Tidepool does not use paper records for any sensitive information. Use of paper for recording and storing sensitive data is against Tidepool policies.