* Assets returned by employees > should be tracked under assets available
* Cloud provider service agreement > alreadey in assets available
* ISO 27001 certification from cloud provider > already in assets available
* Supplier/vendor agreements > already in assets available