Assets returned by employees > should be tracked under assets available
Cloud provider service agreement > alreadey in assets available
ISO 27001 certification from cloud provider > already in assets available
Supplier/vendor agreements > already in assets available
