{"data":{"id":"SC-15","name":"Collaborative Computing Devices and Applications","family":"SC","family_name":"System and Communications Protection","withdrawn":false,"description":"a. Prohibit remote activation of collaborative computing devices and applications with the following exceptions: [Assignment: organization-defined exceptions where remote activation is to be allowed]; and\nb. Provide an explicit indication of use to users physically present at the devices.","supplemental_guidance":"Collaborative computing devices and applications include remote meeting devices and applications, networked white boards, cameras, and microphones. The explicit indication of use includes signals to users when collaborative computing devices and applications are activated.","enhancements":[{"id":"SC-15(01)","name":"Physical or Logical Disconnect","statement":"Provide [Selection (one or more): physical; logical] disconnect of collaborative computing devices in a manner that supports ease of use.","baselines":[]},{"id":"SC-15(02)","name":"Blocking Inbound and Outbound Communications Traffic","withdrawn":true,"incorporated_into":["SC-07"]},{"id":"SC-15(03)","name":"Disabling and Removal in Secure Work Areas","statement":"Disable or remove collaborative computing devices and applications from [Assignment: organization-defined systems or system components] in [Assignment: organization-defined secure work areas].","baselines":[]},{"id":"SC-15(04)","name":"Explicitly Indicate Current Participants","statement":"Provide an explicit indication of current participants in [Assignment: organization-defined online meetings and teleconferences].","baselines":[]}],"baseline_low":true,"baseline_moderate":true,"baseline_high":true,"nist_800_53":{"rev5":{"id":"SC-15","name":"Collaborative Computing Devices and Applications","description":"a. Prohibit remote activation of collaborative computing devices and applications with the following exceptions: [Assignment: organization-defined exceptions where remote activation is to be allowed]; and\nb. Provide an explicit indication of use to users physically present at the devices.","discussion":"Collaborative computing devices and applications include remote meeting devices and applications, networked white boards, cameras, and microphones. The explicit indication of use includes signals to users when collaborative computing devices and applications are activated.","related_controls":["AC-21","SC-42"],"baseline_low":true,"baseline_moderate":true,"baseline_high":true,"baseline_privacy":false,"new_in_rev5":false,"changes_from_rev4":"Control text adds 'and applications' to both the title and control text"}},"compliance_mappings":{"iso_27001_2022":["A.5.14"],"iso_27002_2022":[],"cobit_2019":[],"pci_dss_v4":[],"nist_csf_2":[],"cis_controls_v8":[],"soc2_tsc":[],"finos_ccc":[],"iso_42001_2023":[],"iec_62443":[],"asd_e8":[],"nis2":[],"apra_cps_234":[],"mas_trm":[],"pra_op_resilience":[],"bsi_grundschutz":[],"anssi":["Hygiene.22","SecNumCloud.14.1"],"osfi_b13":["B-13.3.2"],"finma_circular":["IV.B.d(59)","IV.C(62)"],"gdpr":["Art.32(1)(b)"],"dora":["Art.9(4)(a)"],"bio2":[],"rbi_csf":["Annex1.8"],"fisc":[],"lgpd_bcb":[],"hkma_tme1":[],"mlps_2":[],"dnb_good_practice":[],"cra":[],"swift_cscf":[],"qatar_nia":["CS"],"eba_ict":["3.8(a)"],"hipaa_sr":["§164.310(b)"],"cmmc_2":["SC"],"nerc_cip":[],"nrc_73_54":[],"tsa_psd":[],"ieee_1686":[],"ferc_cip":[],"doe_c2m2":[],"api_1164":[],"awia":[],"iaea_nss":[],"pci_pts":[],"fips_140":[],"cbest":[],"tiber_eu":[],"pci_hsm":[],"common_criteria":[],"isae_3402":[],"fca_sysc_13":[],"fda_21_cfr_11":[],"fda_cyber":[],"hitrust_csf":[],"iso_27799":[],"lloyds_ms":[],"naic_ds":[],"nhs_dspt":[],"pra_ss1_23":[],"solvency_ii":[],"owasp_masvs_v2":[],"csa_ccm_v4":[],"csa_aicm":[],"ccss_v9":[],"mica":[],"basel_sco60":[],"bssc":[],"sec_custody_digital":[],"dpdpa":[]},"attack_techniques":[],"metadata":{"last_reviewed":"2026-10-02","review_notes":"2026-10-02: iso_27001_2022 clauses taken from NIST's SP 800-53 Rev 5 to ISO/IEC 27001:2022 crosswalk (OLIR, v1.0.0). OSA had none.","mapping_status":"complete"},"function":"preventative","used_by_patterns":["SP-001"]}}