graphgrc

SCF - DCH-24 - Information Location

Mechanisms exist to identify and document the location of information and the specific system components on which the information resides.

Mapped framework controls

GDPR

NIST 800-53

Control questions

Does the organization identify and document the location of information and the specific system components on which the information resides?