3.13.12

Requirement

Prohibit remote activation of collaborative computing devices and provide indication of devices in use to users present at the device.

Discussion

Collaborative computing devices include networked white boards, cameras, and microphones. Indication of use includes signals to users when collaborative computing devices are activated. Dedicated video conferencing systems, which rely on one of the participants calling or connecting to the other party to activate the video conference, are excluded. [29] Dedicated video conferencing systems, which rely on one of the participants calling or connecting to the other party to activate the video conference, are excluded.

NIST 800-171A Assessment Guidance

Examine

[SELECT FROM: System and communications protection policy; procedures addressing collaborative computing; access control policy and procedures; security plan; system design documentation; system configuration settings and associated documentation; system audit logs and records; other relevant documents or records].
Interview

[SELECT FROM: System or network administrators; personnel with information security responsibilities; system developer; personnel with responsibilities for managing collaborative computing devices].
Test

[SELECT FROM: Mechanisms supporting or implementing management of remote activation of collaborative computing devices; mechanisms providing an indication of use of collaborative computing devices].

ID	Assessment Objectives
3.13.12[a]	Collaborative computing devices are identified.
3.13.12[b]	Collaborative computing devices provide indication to users of devices in use.
3.13.12[c]	Remote activation of collaborative computing devices is prohibited.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!