13. Asset Management

13.1 Glesys identifies, records, classifies and manages information assets and systems throughout their lifecycle. Glesys has established classification levels for all assets, including information, within its network and information systems. Assets are classified based on confidentiality, integrity, authenticity and availability requirements, and classification levels are regularly reviewed and updated as appropriate, including but not limited to:

a) central system inventory with ownership, criticality, classification, and lifecycle attributes;

b) classification model (public/internal/confidential/restricted) with handling expectations;

c) secure sanitization/destruction and traceability for equipment disposal, aligned with sustainability considerations; and

d) guidelines for deposit, return or deletion of assets upon termination of employment.