Navigate

SC-42 (2)

SC-42 (2): Authorized Use

The organization employs the following measures: [Assignment: organization-defined measures], so that data or information collected by [Assignment: organization-defined sensors] is only used for authorized purposes.

Supplemental

Information collected by sensors for a specific authorized purpose potentially could be misused for some unauthorized purpose. For example, GPS sensors that are used to support traffic navigation could be misused to track movements of individuals. Measures to mitigate such activities include, for example, additional training to ensure that authorized parties do not abuse their authority, or (in the case where sensor data/information is maintained by external parties) contractual restrictions on the use of the data/information.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
None

Related Controls

The controls below (if any) were marked by NIST as being related to SC-42 (2).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of SC-42 (2).

Control	Description
No controls

Related CCIs

The CCIs below are tied to SC-42 (2).

CCI	Definition
CCI-002553	The organization defines the measures to be employed to ensure data or information collected by organization-defined sensors is used only for authorized purposes.
CCI-002554	The organization defines the sensors that are to collect data or information for authorized purposes.
CCI-002555	The organization employs organization-defined measures, so that data or information collected by organization-defined sensors is only used for authorized purposes.