ComplianceNIST 800-53 enhancement
NIST-SC-42(5) Collection Minimization
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- SC System and Communications Protection
- Control
- SC-42(5)
Control statement
Employ [Assignment: sensors] that are configured to minimize the collection of information about individuals that is not needed.
Discussion
Although policies to control for authorized use can be applied to information once it is collected, minimizing the collection of information that is not needed mitigates privacy risk at the system entry point and mitigates the risk of policy control failures. Sensor configurations include the obscuring of human features, such as blurring or pixelating flesh tones.
Related
Enhancement of · Compliance (1)
- NIST-SC-42 Sensor Capability and Data NIST 800-53 control
Related control · Compliance (2)
- NIST-SA-8 Security and Privacy Engineering Principles NIST 800-53 control
- NIST-SI-12 Information Management and Retention NIST 800-53 control