SC-15 COLLABORATIVE COMPUTING DEVICES

PCF Compliance

Compliance with the requirements defined in this control is a deployer responsibility.

Interpretation of the requirement for notification of any remote session initiation in the PCF PAS operational environment might include the start of an SSH session.

When appropriately configured, an operator may know that someone has remotely connected via SSH to a VM or a container.

PCF provides audit logging for SSH session initiation and the deployer may establish a log alert to satisfy this requirement.

---

Control Description

The information system:

1. Prohibits remote activation of collaborative computing devices with the following exceptions: [Assignment: organization-defined exceptions where remote activation is to be allowed]; and
2. Provides an explicit indication of use to users physically present at the devices.

Supplemental Guidance

Collaborative computing devices include, for example, networked white boards, cameras, and microphones. Explicit indication of use includes, for example, signals to users when collaborative computing devices are activated.