{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"cyber_security","domain":["Physical & Environmental Security","Asset Management & Inventory","Data Protection & Privacy"],"inherent_rating":"medium","taxonomy":["iso-27005-threat","nist-800-30-threat-event","iso-27005-vulnerability"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aphys-theft-of-equipment-media","description":"Physical stealing of storage media, printouts, or computing/network equipment (including unattended laptops outside the perimeter), potentially exposing stored data. Unprotected storage locations increase exposure.","details":{"category":"cyber_security","impact":"medium","inherent_rating":"medium","likelihood":"medium","risk_id":"phys-theft-of-equipment-media","taxonomies":["iso-27005-threat","nist-800-30-threat-event","iso-27005-vulnerability"],"treatment":"mitigate"},"id":"risk:phys-theft-of-equipment-media","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aphys-theft-of-equipment-media","sourceIds":["hipaa","iso-27001","nist-800-53","nist-csf-2","pci-dss","soc1","soc2"],"sourceUrl":null,"title":"Theft of equipment, media or unattended devices","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4afa1531454706f610d7e9083d0f3dda8bc8bb739cc47f20f5f054c7988610dd","properties":{"rationale":"Storing media in secured, access-controlled locations and protecting it in transit directly counters theft of media, printouts, and devices.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-data-10-e7ad28aa.json","sourceId":"uc:UC-DATA-10","targetDetailPath":"/data/v1/records/risk-phys-theft-of-equipment-media-c64433e7.json","targetId":"risk:phys-theft-of-equipment-media","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4dec5a467256aa005c4cd1b2129349e400ce6f95cfcec6e5fcb80756f95e404e","properties":{"rationale":"Authorizing, recording, and tracking asset movement and investigating unauthorized removal directly deter and detect equipment/media theft.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-phys-10-9339a7b3.json","sourceId":"uc:UC-PHYS-10","targetDetailPath":"/data/v1/records/risk-phys-theft-of-equipment-media-c64433e7.json","targetId":"risk:phys-theft-of-equipment-media","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:63ccaa22c5fbb5cb19bf6b1716a27a23a662c4476974bae8e1a0698cfed9284a","properties":{"rationale":"CCTV, intrusion detection, and anomaly investigation deter and detect theft of equipment and media in progress or after.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-phys-02-05f35d07.json","sourceId":"uc:UC-PHYS-02","targetDetailPath":"/data/v1/records/risk-phys-theft-of-equipment-media-c64433e7.json","targetId":"risk:phys-theft-of-equipment-media","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:87f8aba456988e9f7f78a19678e920f244d2739690420bda661c830acbcd574a","properties":{"rationale":"Endpoint encryption plus off-premises loss/theft protection directly reduces exposure from stolen or unattended devices.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-06-d13d9c7f.json","sourceId":"uc:UC-ASSET-06","targetDetailPath":"/data/v1/records/risk-phys-theft-of-equipment-media-c64433e7.json","targetId":"risk:phys-theft-of-equipment-media","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8f7c57cb7c9721707ffda5e8bff4afddceb48f87dcaa8a602f916de2660b9ba7","properties":{"rationale":"Classification markings drive correct protective handling and storage of sensitive media, indirectly reducing loss exposure, but marking does not itself prevent or detect theft — access, monitoring, and tracking do.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-phys-12-cef7672b.json","sourceId":"uc:UC-PHYS-12","targetDetailPath":"/data/v1/records/risk-phys-theft-of-equipment-media-c64433e7.json","targetId":"risk:phys-theft-of-equipment-media","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:916a5f73c86982a998a42038eb41a19435b88179395ca277226a86d2ec11a2dc","properties":{"rationale":"Restricting and revoking physical access keeps unauthorized persons away from equipment and media, directly preventing on-site theft.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-access-19-08a17359.json","sourceId":"uc:UC-ACCESS-19","targetDetailPath":"/data/v1/records/risk-phys-theft-of-equipment-media-c64433e7.json","targetId":"risk:phys-theft-of-equipment-media","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a3657e77f686c7bb92d6b9d82530c0961acda79236ac3905d8974e4e1f555fa0","properties":{"rationale":"Recovering assets and verifying return at termination reduces loss of devices to departing personnel.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-07-5039208b.json","sourceId":"uc:UC-ASSET-07","targetDetailPath":"/data/v1/records/risk-phys-theft-of-equipment-media-c64433e7.json","targetId":"risk:phys-theft-of-equipment-media","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:afd9bf57a64a2dd6b676a6c3493fb4212f1b30f880b3d3818c503295a85124f9","properties":{"rationale":"Periodic inventory reconciliation detects missing/stolen assets and scopes what data was exposed.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-01-04dbd5db.json","sourceId":"uc:UC-ASSET-01","targetDetailPath":"/data/v1/records/risk-phys-theft-of-equipment-media-c64433e7.json","targetId":"risk:phys-theft-of-equipment-media","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c3830f0a941486428e1158125fc1bccab5c816455ed9c8efda00001e7009dbf3","properties":{"rationale":"Prioritizing protection by criticality directs stronger physical safeguards to high-value assets, reducing theft impact.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-03-3e6216cd.json","sourceId":"uc:UC-ASSET-03","targetDetailPath":"/data/v1/records/risk-phys-theft-of-equipment-media-c64433e7.json","targetId":"risk:phys-theft-of-equipment-media","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d3158996dd1e69959ea6479d7a90da8f3611ca01ebed079ea2d3c5711e71f800","properties":{"rationale":"Physically securing media by classification and restricting access to it directly reduces theft of stored media.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-04-347e095f.json","sourceId":"uc:UC-ASSET-04","targetDetailPath":"/data/v1/records/risk-phys-theft-of-equipment-media-c64433e7.json","targetId":"risk:phys-theft-of-equipment-media","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e15563e8ddc3fba74fd85156119de71d014733f9ce2499897b3ed9f9b19ec872","properties":{"rationale":"Requiring physical protection of equipment and information at alternate work sites directly reduces theft of devices used outside the perimeter.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-phys-11-d74b621d.json","sourceId":"uc:UC-PHYS-11","targetDetailPath":"/data/v1/records/risk-phys-theft-of-equipment-media-c64433e7.json","targetId":"risk:phys-theft-of-equipment-media","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ef0c725c40dd91eb262848db649a395c5d8f3ffee63175dff3dccc15e08380b1","properties":{"rationale":"Controlling and promptly revoking physical access prevents unauthorized persons from reaching and removing equipment or media.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-phys-01-354431a7.json","sourceId":"uc:UC-PHYS-01","targetDetailPath":"/data/v1/records/risk-phys-theft-of-equipment-media-c64433e7.json","targetId":"risk:phys-theft-of-equipment-media","type":"mitigates"}],"schemaVersion":1}