risk
Theft of equipment, media or unattended devices
Physical stealing of storage media, printouts, or computing/network equipment (including unattended laptops outside the perimeter), potentially exposing stored data. Unprotected storage locations increase exposure.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- category
- cyber_security
- domain
- Physical & Environmental Security
- Asset Management & Inventory
- Data Protection & Privacy
- taxonomy
- iso-27005-threat
- nist-800-30-threat-event
- iso-27005-vulnerability
- inherent_rating
- medium
Details
- risk_id
- phys-theft-of-equipment-media
- category
- cyber_security
- likelihood
- medium
- impact
- medium
- inherent_rating
- medium
- treatment
- mitigate
- taxonomies
- iso-27005-threat
- nist-800-30-threat-event
- iso-27005-vulnerability
Source
No record-specific source URL is provided.
Connections
- UC-DATA-10 — Protect physical media containing sensitive data mitigates Theft of equipment, media or unattended devices
- strength
- primary
- rationale
- Storing media in secured, access-controlled locations and protecting it in transit directly counters theft of media, printouts, and devices.
- UC-PHYS-10 — Control and track asset delivery, removal, and movement mitigates Theft of equipment, media or unattended devices
- strength
- primary
- rationale
- Authorizing, recording, and tracking asset movement and investigating unauthorized removal directly deter and detect equipment/media theft.
- UC-PHYS-02 — Monitor physical access and retain visitor and entry records mitigates Theft of equipment, media or unattended devices
- strength
- primary
- rationale
- CCTV, intrusion detection, and anomaly investigation deter and detect theft of equipment and media in progress or after.
- UC-ASSET-06 — Govern acceptable use of endpoints, off-site, and external systems mitigates Theft of equipment, media or unattended devices
- strength
- primary
- rationale
- Endpoint encryption plus off-premises loss/theft protection directly reduces exposure from stolen or unattended devices.
- UC-PHYS-12 — Mark hardware components with handling designations mitigates Theft of equipment, media or unattended devices
- strength
- related
- rationale
- Classification markings drive correct protective handling and storage of sensitive media, indirectly reducing loss exposure, but marking does not itself prevent or detect theft — access, monitoring, and tracking do.
- UC-ACCESS-19 — Restrict physical access and maintain environmental safeguards mitigates Theft of equipment, media or unattended devices
- strength
- primary
- rationale
- Restricting and revoking physical access keeps unauthorized persons away from equipment and media, directly preventing on-site theft.
- UC-ASSET-07 — Manage assets through their life cycle and recover them at exit mitigates Theft of equipment, media or unattended devices
- strength
- related
- rationale
- Recovering assets and verifying return at termination reduces loss of devices to departing personnel.
- UC-ASSET-01 — Maintain a complete inventory of systems, hardware, and software mitigates Theft of equipment, media or unattended devices
- strength
- related
- rationale
- Periodic inventory reconciliation detects missing/stolen assets and scopes what data was exposed.
- UC-ASSET-03 — Classify, prioritize, and label information and assets mitigates Theft of equipment, media or unattended devices
- strength
- related
- rationale
- Prioritizing protection by criticality directs stronger physical safeguards to high-value assets, reducing theft impact.
- UC-ASSET-04 — Control storage media through use, storage, and destruction mitigates Theft of equipment, media or unattended devices
- strength
- primary
- rationale
- Physically securing media by classification and restricting access to it directly reduces theft of stored media.
- UC-PHYS-11 — Secure alternate work sites mitigates Theft of equipment, media or unattended devices
- strength
- primary
- rationale
- Requiring physical protection of equipment and information at alternate work sites directly reduces theft of devices used outside the perimeter.
- UC-PHYS-01 — Restrict physical access to facilities and secure areas mitigates Theft of equipment, media or unattended devices
- strength
- primary
- rationale
- Controlling and promptly revoking physical access prevents unauthorized persons from reaching and removing equipment or media.