Ossus Trust Center

Organization maintains an inventory of information systems, which is reconciled on a periodic basis.

Organization maintains an inventory of application assets, which is reconciled on a periodic basis.

Organization assets are labeled and have designated owners.

Where applicable, Organization marks information system media indicating the distribution limitations, handling caveats, and applicable security markings (if any) of the information. Exemptions must be approved by management and remain in a specific controlled area.

Organization authorizes and records the entry and exit of systems at datacenter locations.

Equipment maintenance is documented and approved according to management requirements.

Organization's business contingency plan is periodically reviewed, approved by management and communicated to relevant team members.

Organization performs business contingency and disaster recovery tests on a periodic basis and ensures the following: • tests are executed with relevant contingency teams • test results are documented • corrective actions are taken for exceptions noted • plans are updated based on results