+SC-42(01) Reporting to Authorized Individuals or Roles

SC-42(01) Reporting to Authorized Individuals or Roles

Control

Verify that the system is configured so that data or information collected by the [Assignement: sensors] is only reported to authorized individuals or roles.

Discussion

In situations where sensors are activated by authorized individuals, it is still possible that the data or information collected by the sensors will be sent to unauthorized entities.

Assessment Objective

the system is configured so that data or information collected by the [Assignement: sensors] is only reported to authorized individuals or roles.

Assessment Method

Examine

System and communications protection policy access control policy and procedures procedures addressing sensor capability and data collection personally identifiable information processing policy system design documentation system configuration settings and associated documentation system architecture system audit records system security plan privacy plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security and privacy responsibilities system developer organizational personnel installing, configuring, and/or maintaining the system organizational personnel responsible for the sensor capabilities

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
is blocked by SC-42(01) Reporting to Authorized Individuals or Roles – Assessment Procedure
is blocked by Embedded Sensor Configuration Verification