A subject deliberately takes or appropriates physical assets belonging to an organization without authorization. This may include corporate laptops, mobile phones, storage devices, IT equipment, physical documents, or other organizational property.

Theft may result in financial loss, operational disruption, or the unauthorized possession of sensitive organizational information. Where stolen assets contain or provide access to organizational data, the infringement may also create opportunities for subsequent unauthorized access, data disclosure, or exfiltration.

Subsections (4)

ID	Name	Description
IF015.001	Theft of a Corporate Laptop	A subject steals a corporate laptop belonging to an organization for personal use, financial gain, transfer to a third party, or unauthorized access to the information and systems associated with the device. The theft may result in financial loss, operational disruption, or exposure of organizational information stored on or accessible through the laptop. The nature and extent of the impact depend on the subject's intended use of the device, the information it contains, and the security controls in place.
IF015.002	Theft of a Corporate Mobile Phone	A subject steals a corporate mobile phone belonging to an organization for personal use, financial gain, transfer to a third party, or unauthorized access to organizational communications, information, and services. The theft may result in financial loss, operational disruption, or exposure of organizational information and authentication mechanisms associated with the device. The nature and extent of the impact depend on the subject's intended use of the device, its configuration, and the security controls in place.
IF015.004	Theft of Non-Digital Assets	A subject steals non-digital assets, such as physical documents, belonging to an organization.
IF015.003	Theft of Other Digital Assets	A subject steals other digital assets, such as monitors, hard drives, or peripherals, belonging to an organization.

Preventions (4)

Detections (3)