+SC-15 [L] Collaborative Computing Devices and Applications
|
SC-15 [L] Collaborative Computing Devices and Applications
Control
- Prohibit remote activation of collaborative computing devices and applications with the following exceptions: [Assignement: exceptions where remote activation is to be allowed] ; and
- Provide an explicit indication of use to users physically present at the devices.
Discussion
Collaborative computing devices and applications include remote meeting devices and applications, networked white boards, cameras, and microphones. The explicit indication of use includes signals to users when collaborative computing devices and applications are activated.
Assessment Objective
- remote activation of collaborative computing devices and applications is prohibited except [Assignement: exceptions where remote activation is to be allowed];
- an explicit indication of use is provided to users physically present at the devices.
Assessment Method
Examine
System and communications protection policy
procedures addressing collaborative computing
access control policy and procedures
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
Interview
System/network administrators
organizational personnel with information security responsibilities
system developer
organizational personnel with responsibilities for managing collaborative computing devices
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|