Audit details
1. Prepare
- Inventory exported as at the audit date and compared with the device-management console and directory
- Devices in the console but not in the inventory listed for investigation (and the reverse)
- Leavers since the last audit listed, with the devices they held
- Scanner or phone ready to read asset labels; spare labels packed
2. Verify devices
- Every in-scope device seen, or confirmed with its custodian (photo of the label and serial for remote staff)
- Serial number on the device matches the inventory
- Custodian and location match the inventory; differences recorded
- Asset label present and readable; re-labelled with the same ID if damaged
- Devices in store counted and their condition recorded
- Devices awaiting disposal identified and stored securely
3. Check security
- Disk encryption confirmed on laptops, desktops, phones and tablets
- Every endpoint enrolled in device management (MDM / endpoint management)
- Operating system supported and up to date
- Data classification recorded for each device
- Devices returned by leavers wiped before reissue
- Disposed devices have a data-wipe or destruction record
4. Reconcile & report
| Asset ID | Device | Issue found | Action | Owner | Due | Closed |
|---|---|---|---|---|---|---|
