Title

Built-in cameras must be disabled unless allowed by physical security policies. (Cat II impact)

Discussion

Cameras can capture still pictures and video of sensitive information. There is also a potential for remote access, and cameras must be turned off unless approved by local policy.

Check Content

Verify built-in cameras are turned off unless allowed by physical security policies. View status in device manager. If cameras have not been disabled per physical security policies, this is a finding. If the system does not have cameras, this is not applicable.

Fix Text

Disable built-in cameras in device manager unless allowed by physical security policies.

Additional Identifiers

Rule ID: SV-48440r2_rule

Vulnerability ID: V-36763

Group Title: WN08-MO-000009

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.