SC-42(1): Reporting to Authorized Individuals or Roles

Threats Addressed:

Baselines:

(Not part of any baseline)

Previous Version:

Control Statement

Verify that the system is configured so that data or information collected by the [Assignment: organization-defined sensors] is only reported to authorized individuals or roles.

Supplemental Guidance

In situations where sensors are activated by authorized individuals, it is still possible that the data or information collected by the sensors will be sent to unauthorized entities.