CMMC Practice SC.2.178: Prohibit remote activation of collaborative computing devices and provide indication of devices in use to users present at the device.
You should configure collaborative computing devices so they cannot be activated remotely. Examples of such devices are cameras, microphones, etc. All users should receive a notification when a collaborative computing device is in use. Notification can include an indicator light that turns on when in use, or a specific text window that appears on screen. If a device does not have the means to alert a user when in use, the organization should provide manual means. Manual means can include, as necessary:
- paper notification on entryways; and
- locking entryways when a collaborative computing device is in use.