S 2.308 Moving out of buildings

Initiation responsibility: Head of Internal Services, Top Management

Implementation responsibility: Employee, Internal Services

If a building is cleared partially or completely due to moving out, the following must be observed:

• Before moving out, an inventory of all items relevant for information security (hardware, software, data carriers, files, documents etc.) must be created.
• Every employee must be informed in writing on the matters he/she is responsible for. This is to avoid the situation that an employee takes care of his/her own matters, but other matters that are presumably within the responsibility of another person are not addressed.
• Before moving out, old devices, data carriers etc. not required any more should be disposed of in accordance with the safeguard S 2.13 Correct disposal of resources requiring protection. Old resources must in no case be left behind, even if the landlord, new tenant or buyer requests their further use or promises disposal.
• After completion of moving out, all rooms must be checked to make sure no security-critical objects are left behind. Especially in remote storage areas such as basements and attics, objects are often forgotten.
  
  All objects for official use must be systematically collected, removed and, if applicable, safely disposed of later on.

The recommendations of S 2.177 Security during relocation should be considered.

Review questions:

• Are inventories created and distributed for moving out?
• Is the building searched for left-behind objects after completion of moving out?