SC-15

Requirement
1. Prohibit remote activation of collaborative computing devices and applications with the following exceptions: [Assignment: organization-defined exceptions where remote activation is to be allowed]; and
2. Provide an explicit indication of use to users physically present at the devices.

Discussion

Collaborative computing devices and applications include remote meeting devices and applications, networked white boards, cameras, and microphones. The explicit indication of use includes signals to users when collaborative computing devices and applications are activated.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and communications protection policy; procedures addressing collaborative computing; access control policy and procedures; system design documentation; system configuration settings and associated documentation; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; system developer; organizational personnel with responsibilities for managing collaborative computing devices].

Test

[SELECT FROM: Mechanisms supporting and/or implementing the management of remote activation of collaborative computing devices; mechanisms providing an indication of use of collaborative computing devices].

ID	Assessment Objectives
SC-15b.	an explicit indication of use is provided to users physically present at the devices.
SC-15a.	remote activation of collaborative computing devices and applications is prohibited except <SC-15_ODP exceptions where remote activation is to be allowed>;

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!