Navigate

SC-15

SC-15: Collaborative Computing Devices

The information system:

a: Prohibits remote activation of collaborative computing devices with the following exceptions: [organization-defined exceptions where remote activation is to be allowed]; and

b: Provides an explicit indication of use to users physically present at the devices.

Supplemental

Collaborative computing devices include, for example, networked white boards, cameras, and microphones. Explicit indication of use includes, for example, signals to users when collaborative computing devices are activated.

CIA Levels
Confidentiality	high
Integrity	unknown
Availability	unknown

Overlays
None

CSF Categories
PR.AC-3

Related Controls

The controls below (if any) were marked by NIST as being related to SC-15.

Control	Description
AC-21	The organization: a: Facilitates information sharing by enabling authorized users to determine whether access authorizations assigned to the sharing partner match the access restrictions on the information for [organization-defined information sharing circumstances where user discretion is required]; and b: Employs [organization-defined automated mechanisms or manual processes] to assist users in making information sharing/collaboration decisions.

Control

Description

AC-21

The organization:

a: Facilitates information sharing by enabling authorized users to determine whether access authorizations assigned to the sharing partner match the access restrictions on the information for [organization-defined information sharing circumstances where user discretion is required]; and

b: Employs [organization-defined automated mechanisms or manual processes] to assist users in making information sharing/collaboration decisions.

Enhancements

The controls below (if any) add on to the requirements of SC-15.

Control	Description
SC-15(1)	The information system provides physical disconnect of collaborative computing devices in a manner that supports ease of use.
SC-15(2)
SC-15(3)	The organization disables or removes collaborative computing devices from [organization-defined information systems or information system components] in [organization-defined secure work areas].
SC-15(4)	The information system provides an explicit indication of current participants in [organization-defined online meetings and teleconferences].

Related CCIs

The CCIs below are tied to SC-15.

CCI	Definition
CCI-001150	Prohibit remote activation of collaborative computing devices and applications, excluding the organization-defined exceptions where remote activation is to be allowed.
CCI-001151	Defines exceptions to the prohibition of collaborative computing devices where remote activation is to be allowed.
CCI-001152	Provide an explicit indication of use to users physically present at collaborative computing devices.