Navigate

CCI-002550

CCI-002550 Definition

Provide an explicit indication of sensor use to the organization-defined class of users.

Status
Type	CheckType.technical

Master Assessment Datasheet

Implementation Guidance

Determine if an explicit indication of sensor use is provided to [SC-42_ODP[05]; group of users to whom an explicit indication of sensor use is to be provided is defined].

Validation Procedures

Examine: [SELECT FROM: System and communications protection policy; procedures addressing sensor capabilities and data collection; access control policy and procedures; system design documentation; system configuration settings and associated documentation; system audit records; system security plan; privacy plan; other relevant documents or records]. Interview: [SELECT FROM: System/network administrators; organizational personnel with information security and privacy responsibilities; system developer; organizational personnel installing, configuring, and/or maintaining the system; organizational personnel responsible for sensor capabilities]. Test: [SELECT FROM: Mechanisms implementing access controls for the remote activation of system sensor capabilities; mechanisms implementing the capability to indicate sensor use].

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-002550.

Control	Description
SC-42	a: Prohibit [one or more of "the use of devices possessing {{ insert: param, sc-42_odp.02 }} in {{ insert: param, sc-42_odp.03 }} "/"the remote activation of environmental sensing capabilities on organizational systems or system components with the following exceptions: {{ insert: param, sc-42_odp.04 }} "] ; and b: Provide an explicit indication of sensor use to [group of users to whom an explicit indication of sensor use is to be provided is defined;].

Control

Description

SC-42

a: Prohibit [one or more of "the use of devices possessing {{ insert: param, sc-42_odp.02 }} in {{ insert: param, sc-42_odp.03 }} "/"the remote activation of environmental sensing capabilities on organizational systems or system components with the following exceptions: {{ insert: param, sc-42_odp.04 }} "] ; and

b: Provide an explicit indication of sensor use to [group of users to whom an explicit indication of sensor use is to be provided is defined;].