Navigate

CCI-002981

CCI-002981 Definition

Defines the assets within the organization-defined controlled areas which are to be tracked and monitored for their location and movement.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Determine if [PE-20_ODP[01]; asset location technologies to be employed to track and monitor the location and movement of assets is defined] are employed to track and monitor the location and movement of [PE-20_ODP[02]; assets whose location and movement are to be tracked and monitored are defined] within [PE-20_ODP[03]; controlled areas within which asset location and movement are to be tracked and monitored are defined].

Validation Procedures

Examine: [SELECT FROM: Physical and environmental protection policy; procedures addressing asset monitoring and tracking; documentation showing the use of asset location technologies; system configuration documentation; list of organizational assets requiring tracking and monitoring; asset monitoring and tracking records; system security plan; privacy plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with asset monitoring and tracking responsibilities; legal counsel; organizational personnel with information security and privacy responsibilities]. Test: [SELECT FROM: Organizational processes for tracking and monitoring assets; mechanisms supporting and/or implementing the tracking and monitoring of assets].

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-002981.

Control	Description
PE-20	Employ [asset location technologies to be employed to track and monitor the location and movement of assets is defined;] to track and monitor the location and movement of [assets whose location and movement are to be tracked and monitored are defined;] within [controlled areas within which asset location and movement are to be tracked and monitored are defined;].