Title

Built-in microphones must be disabled on mobile devices unless required and approved by the organization. (Cat II impact)

Discussion

Microphones can capture audio of sensitive information. There is also a potential for remote access, and microphones must be turned off unless approved by local policy.

Check Content

Verify microphones are turned off unless approved by the organization. View status in device manager. If built-in microphones are not approved by local policy or disabled, this is a finding. If the system does not have built-in microphones, this is not applicable.

Fix Text

Disable microphones in device manager if not organizationally approved.

Additional Identifiers

Rule ID: SV-48442r2_rule

Vulnerability ID: V-36765

Group Title: WN08-MO-000010

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.