SC-42(1)—Reporting To Authorized Individuals Or Roles
>Control Description
Verify that the system is configured so that data or information collected by the [Assignment: organization-defined sensors] is only reported to authorized individuals or roles.
>Supplemental Guidance
In situations where sensors are activated by authorized individuals, it is still possible that the data or information collected by the sensors will be sent to unauthorized entities.