← Controls / SC

SC-15 Collaborative Computing Devices and Applications

System and Communications Protection

Low Moderate High

Description

a. Prohibit remote activation of collaborative computing devices and applications with the following exceptions: [Assignment: organization-defined exceptions where remote activation is to be allowed]; and b. Provide an explicit indication of use to users physically present at the devices.

Supplemental Guidance

Collaborative computing devices and applications include remote meeting devices and applications, networked white boards, cameras, and microphones. The explicit indication of use includes signals to users when collaborative computing devices and applications are activated.

Changes from Rev 4

Control text adds 'and applications' to both the title and control text

Enhancements (3)

What NIST adds to this control. Select one to read its statement.

SC-15(01) Physical or Logical Disconnect

Provide [Selection (one or more): physical; logical] disconnect of collaborative computing devices in a manner that supports ease of use.

SC-15(03) Disabling and Removal in Secure Work Areas

Disable or remove collaborative computing devices and applications from [Assignment: organization-defined systems or system components] in [Assignment: organization-defined secure work areas].

SC-15(04) Explicitly Indicate Current Participants

Provide an explicit indication of current participants in [Assignment: organization-defined online meetings and teleconferences].

Withdrawn by NIST:

  • SC-15(02) Blocking Inbound and Outbound Communications Traffic, now in SC-07

Patterns that use this control (1)

Grouped by the emphasis each pattern gives it.

Compliance Mappings

ISO 27001:2022

A.5.14

ANSSI

Hygiene.22SecNumCloud.14.1

FINMA Circular 2023/1

IV.B.d(59)IV.C(62)

OSFI B-13

B-13.3.2

EU GDPR

Art.32(1)(b)

EU DORA

Art.9(4)(a)

RBI CSF

Annex1.8

Qatar NIA

CS

HIPAA Security Rule

§164.310(b)

EBA ICT Guidelines

3.8(a)

CMMC 2.0

SC

ISO 17799 (legacy)

None.

COBIT 4.1 (legacy)

None.