+SC-42(02) Authorized Use
|
SC-42(02) Authorized Use
Control
Employ the following measures so that data or information collected by [Assignement: sensors] is only used for authorized purposes: [Assignement: measures].
Discussion
Information collected by sensors for a specific authorized purpose could be misused for some unauthorized purpose. For example, GPS sensors that are used to support traffic navigation could be misused to track the movements of individuals. Measures to mitigate such activities include additional training to help ensure that authorized individuals do not abuse their authority and, in the case where sensor data is maintained by external parties, contractual restrictions on the use of such data.
Assessment Objective
[Assignement: measures] are employed so that data or information collected by [Assignement: sensors] is only used for authorized purposes.
Assessment Method
Examine
System and communications protection policy
access control policy and procedures
personally identifiable information processing policy
sensor capability and data collection
system design documentation
system configuration settings and associated documentation
system architecture
list of measures to be employed to that the ensure data or information collected by sensors is only used for authorized purposes
system audit records
system security plan
privacy plan
other relevant documents or records
Interview
System/network administrators
organizational personnel with information security and privacy responsibilities
organizational personnel installing, configuring, and/or maintaining the system
organizational personnel responsible for sensor capabilities
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|