SC-15: Collaborative Computing Devices

CSF v1.1 References:

PF v1.0 References:

Threats Addressed:

Baselines:

  • Low
    • SC-15
  • Moderate
    • SC-15
  • High
    • SC-15

Next Version:

Control Statement

The information system:

  1. Prohibits remote activation of collaborative computing devices with the following exceptions: [Assignment: organization-defined exceptions where remote activation is to be allowed]; and
  2. Provides an explicit indication of use to users physically present at the devices.

Supplemental Guidance

Collaborative computing devices include, for example, networked white boards, cameras, and microphones. Explicit indication of use includes, for example, signals to users when collaborative computing devices are activated.

Control Enhancements

SC-15(1): Physical Disconnect

Baseline(s):

(Not part of any baseline)

The information system provides physical disconnect of collaborative computing devices in a manner that supports ease of use.

SC-15(3): Disabling / Removal In Secure Work Areas

Baseline(s):

(Not part of any baseline)

The organization disables or removes collaborative computing devices from [Assignment: organization-defined information systems or information system components] in [Assignment: organization-defined secure work areas].