Mechanisms exist to identify and document the location of information and the specific system components on which the information resides.
Does the organization identify and document the location of information and the specific system components on which the information resides?