SC-42(5)

  • Requirement

    Employ [Assignment: organization-defined sensors] that are configured to minimize the collection of information about individuals that is not needed.

  • Discussion

    Although policies to control for authorized use can be applied to information once it is collected, minimizing the collection of information that is not needed mitigates privacy risk at the system entry point and mitigates the risk of policy control failures. Sensor configurations include the obscuring of human features, such as blurring or pixelating flesh tones.

More Info

  • Title

    Sensor Capability and Data | Collection Minimization
  • Family

    System and Communications Protection
  • Related NIST 800-53 ID

    SA-8;SI-12

CMMC Training

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!