The SRG requires apps to provide a number of audit, logging, and alerting functions. The SRG requires the app to alert the OS or Mobile Device Manager (MDM) upon each instance of an app component failure. Such a failure leaves the app, mobile device, and stored data exposed to potential malicious activity. One component that may fail, yet leave the app operational, is a security module that provides encryption of all data at rest or in transit. Similarly, a module that labels data with the appropriate classification attribute could also fail, yet allow the app to continue to function. In these instances, the app is no longer able to protect itself to the same level of security when fully operational. These alerts can be used to initiate a fix or invoke incident response procedures.