- Inventory conference-room systems, softphone and collaboration clients, and always-on room hardware; verify indicator behavior and remote-activation settings on each.
- Administrative remote-activation features in collaboration platforms — auto-answer, remote camera start — are the specific settings to find and disable.
3.13.12OFFICIAL STATEMENT BELOWDERIVED REQUIREMENTPENDING NIST SME REVIEW
3.13.12 — Collaborative device control
3.13 System and Communications Protection · NIST SP 800-171 Rev. 2 · The heading label is this site's navigational shorthand; the official language is the statement below.
Official requirement statement (verbatim)
Prohibit remote activation of collaborative computing devices and provide indication of devices in use to users present at the device.
NIST SP 800-171 Rev. 2 — Protecting CUI in Nonfederal Systems ↗NIST SP 800-171A — Assessing Security Requirements for CUI ↗Independent interpretation
What this requirement is after
Cameras and microphones must not be switchable on remotely without the people in the room knowing. Collaborative devices give an in-use indication, and remote activation is prohibited — the conference room must not become a listening post.
Mapped practices
Brilliant at the Basics practices that support this requirement
No practice maps to this requirement — deliberately.
The campaign’s twenty practices are a priority list, not a control catalog, and none of them works this requirement’s substance directly. It still applies to you if it is in your contract’s scope: address it through your own implementation and the related artifacts below, and treat the absence of a mapping here as honesty, not permission to skip it.
Doing the work
Implementation considerations and evidence
- Configuration for room systems and collaboration clients showing remote activation disabled
- A dated walkthrough confirming in-use indicators work
Artifacts
Templates and worksheets with a mapped relationship
No artifact in the library names this requirement yet. The library index groups everything by category and practice.
The other revision
Where this lands in Rev. 3
Provenance
Sources and review status
| Primary sources | NIST SP 800-171 Rev. 2 — Protecting CUI in Nonfederal Systems · NIST SP 800-171A — Assessing Security Requirements for CUI |
|---|---|
| Review status | Pending NIST SME review |
| Content version | 1.0 |
| Updated |