How to use this worksheet
Use this worksheet before choosing controls or answering where sensitive information is processed, stored, or transmitted. Keep answers factual. If a question affects a contract, legal duty, official program submission, or customer representation, verify it before relying on it.
1Digital locations
- Company email
- Shared cloud storage
- Local laptops and desktops
- Phones and tablets
- Line-of-business applications
- Accounting or document systems
- Backups and archives
2Physical locations
- Office cabinets
- Shop-floor binders
- Vehicles
- Home offices
- Printed drawings
- Shipping paperwork
- Old project boxes
3Outside-party locations
- IT provider systems
- Subcontractor folders
- Engineer or consultant records
- Customer portals
- Cloud services
- Printer or scanner storage
4Control questions
- Who owns this location?
- Who can access it?
- Is it still needed?
- Is it backed up?
- How is it deleted or returned?
- What contract language applies?
Suggested output
After completing this worksheet, create a dated internal note listing open questions, documents to verify, people to involve, and decisions that should not be made without qualified review.
Official sources to verify
Use these official sources for current requirements. This page is educational and may not reflect every contract-specific detail.