Control: The information system:
Collaborative Computing Devices Supplemental Guidance:
Collaborative computing devices include, for example, networked white boards, cameras, and microphones. Explicit indication of use includes, for example, signals to users when collaborative computing devices are activated.
Related control: AC-21.
Collaborative Computing Devices Control Enhancements:
SC-15 (1) Collaborative Computing Devices - Physical Disconnect
The information system provides physical disconnect of collaborative computing devices in a manner that supports ease of use.
Supplemental Guidance: Failing to physically disconnect from collaborative computing devices can result in subsequent compromises of organisational information. Providing easy methods to physically disconnect from such devices after a collaborative computing session helps to ensure that participants actually carry out the disconnect activity without having to go through complex and tedious procedures.
SC-15 (2) Collaborative Computing Devices - Blocking Inbound / Outbound Communications Traffic
[Withdrawn: Incorporated into SC-7].
SC-15 (3) Collaborative Computing Devices - Disabling / Removal in Secure Work Areas
The organisation disables or removes collaborative computing devices from [Assignment: organisation-defined information systems or information system components] in [Assignment: organisation-defined secure work areas].
Supplemental Guidance: Failing to disable or remove collaborative computing devices from information systems or information system components can result in subsequent compromises of organisational information including, for example, eavesdropping on conversations.
SC-15 (4) Collaborative Computing Devices - Explicitly Indicate current Participants
The information system provides an explicit indication of current participants in [Assignment: organisation-defined online meetings and teleconferences].
Supplemental Guidance: This control enhancement helps to prevent unauthorised individuals from participating in collaborative computing sessions without the explicit knowledge of other participants.