Navigate

SC-37 (1)

SC-37 (1): Ensure Delivery / Transmission

The organization employs [Assignment: organization-defined security safeguards] to ensure that only [Assignment: organization-defined individuals or information systems] receive the [Assignment: organization-defined information, information system components, or devices].

Supplemental

Techniques and/or methods employed by organizations to ensure that only designated information systems or individuals receive particular information, system components, or devices include, for example, sending authenticators via courier service but requiring recipients to show some form of government-issued photographic identification as a condition of receipt.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
NC3

Related Controls

The controls below (if any) were marked by NIST as being related to SC-37 (1).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of SC-37 (1).

Control	Description
No controls

Related CCIs

The CCIs below are tied to SC-37 (1).

CCI	Definition
CCI-002525	The organization defines the security safeguards to be employed to ensure only organization-defined individuals or information systems receive organization-defined information, information system components, or devices.
CCI-002526	The organization defines the information, information system components, or devices which are to be received only by organization-defined individuals or information systems.
CCI-002527	The organization employs organization-defined security safeguards to ensure only organization-defined individuals or information systems receive the organization-defined information, information system components, or devices.
CCI-003599	The organization defines the individuals or information systems to be the only recipients of organization-defined information, information system components, or devices, by employing organization-defined security safeguards.