Conduct environmental surveys.

UCF ID: 00690

Control Type: Process or Activity

Status: Live

Supporting and supported controls

This control directly supports:

Maintain asset discovery audit trails. [UCF Control ID 00689]

There are no supporting controls.

Authority documents complied with:

FFIEC IT Examination Handbook – Operations, July 2004, Pg 6, Exam Tier I Obj 4.1; Payment Card Industry (PCI) Information Supplement: PCI DSS Wireless Guideline, Version 1.2, July 2009, § 4.3.1.G

Banking and Finance Guidance

The organization should conduct an environmental survey. The environmental survey should document the organization's resources; the physical locations of the organization's systems; the system's hardware and software configurations; the system's interfaces and interdependencies; and how information is captured, processed, and stored. The environmental survey should be updated on a regular basis. [Pg 6, Exam Tier I Obj 4.1, FFIEC IT Examination Handbook – Operations, July 2004]

Payment Card Guidance

Maintain a current topology of all physical locations of access points. [§ 4.3.1.G, Payment Card Industry (PCI) Information Supplement: PCI DSS Wireless Guideline, Version 1.2, July 2009]