# SC-19 Voice Over Internet Protocol

NIST SP 800-53 control. Family: SC System and Communications Protection. Function: preventative. In no baseline. Mapping licence: CC BY-SA 4.0.
Withdrawn from SP 800-53 by NIST. No successor control is recorded.

Statement: The organization: (i) establishes usage restrictions and implementation guidance for Voice over Internet Protocol (VoIP) technologies based on the potential to cause damage to the information system if used maliciously; and (ii) authorizes, monitors, and controls the use of VoIP within the information system.
Guidance: NIST Special Publication 800-58 provides guidance on security considerations for VoIP technologies employed in information systems.

## Clauses by framework (3 frameworks)
- osfi_b13: B-13.3.2
- finma_circular: IV.C(62), IV.C(63)
- gdpr: Art.32(1)(a)

## More
- This control as JSON, with guidance and ATT&CK techniques: /api/v1/controls/SC-19
- Clauses only: /api/v1/controls/SC-19?fields=mappings
- Page for people: /controls/sc-19/
- Found an error? Open an issue at https://github.com/opensecurityarchitecture/osa-data/issues with the id, what OSA says and what the source says.