SC.2.178 Prohibit remote activation of collaborative computing devices and provide indication of devices in use to users present at the device.

CMMC Practice SC.2.178: Prohibit remote activation of collaborative computing devices and provide indication of devices in use to users present at the device.

Links to Publicly Available Resources

CMMC CLARIFICATION (Ref CMMC – Appendix B)

You should configure collaborative computing devices so they cannot be activated remotely. Examples of such devices are cameras, microphones, etc. All users should receive a notification when a collaborative computing device is in use. Notification can include an indicator light that turns on when in use, or a specific text window that appears on screen. If a device does not have the means to alert a user when in use, the organization should provide manual means. Manual means can include, as necessary:

  • paper notification on entryways; and
  • locking entryways when a collaborative computing device is in use.