The physical use of mobile communications devices with camera capability will be disallowed near classified data unless expressly authorized

Status: Live

The organization will ensure that the physical use of mobile communications devices with camera capability is disallowed near classified data unless expressly authorized. [UCF ID 04598]

Supporting and supported controls

This control directly supports:

Establish and maintain physical security of distributed IT assets [UCF Control ID 00718]

There are no supporting controls.

Authority documents complied with:

DISA Wireless STIG Apriva Sensa Secure Wireless Email System Security Checklist, V5R2.2, Version 5 Release 2.2, § 2.1 (WIR0372), § 2.2 (WIR0371); DISA WIRELESS STIG BLACKBERRY SECURITY CHECKLIST, Version 5, Release 2.4, Version 5 Release 2.4, § 2.1, § 2.2 (WIR0372, WIR0371); DISA Wireless STIG Motorola Good Mobile Wireless Email System Security Checklist, V5R2.3, Version 5 Release 2.3, § 2.1 (WIR0372), § 2.2 (WIR0371); DISA Wireless STIG Windows Mobile Messaging Wireless EChecklist Version 5,Release 2.4, Version 5 Release 2.4, § 2.2 (WIR0371), § 2.2 (WIR0372); DISA WIRELESS SECURITY CHECKLIST, Version 5, Release 2.2, Version 5, Release 2.2, § 5 (WIR0371), § 5 (WIR0372)

Other Configuration Guidance

PEDs with still and/or video cameras should not be allowed in the facility, unless specifically approved in the physical security policies, and should be prohibited in areas where classified information or documents are stored, processed, or transmitted. [§ 2.1 (WIR0372), § 2.2 (WIR0371), DISA Wireless STIG Apriva Sensa Secure Wireless Email System Security Checklist, V5R2.2, Version 5 Release 2.2]

Any type of mobile phone containing either a still or video camera should not be permitted anywhere classified material is stored, processed, or transmitted. Wireless devices with cameras should not be allowed on site, unless approved in the physical security policies. [§ 2.1, § 2.2 (WIR0372, WIR0371), DISA WIRELESS STIG BLACKBERRY SECURITY CHECKLIST, Version 5, Release 2.4, Version 5 Release 2.4]

PEDs with still and/or video cameras should not be allowed in the facility, unless specifically approved in the physical security policies, and should be prohibited in SCIFs or areas where classified information or documents are stored, processed, or transmitted. [§ 2.1 (WIR0372), § 2.2 (WIR0371), DISA Wireless STIG Motorola Good Mobile Wireless Email System Security Checklist, V5R2.3, Version 5 Release 2.3]

PDAs and Smart phones with still and/or video cameras should not be allowed in the facility, unless specifically approved in the physical security policies, and should be prohibited in SCIFs or areas where classified information or documents are stored, processed, or transmitted. [§ 2.2 (WIR0371), § 2.2 (WIR0372), DISA Wireless STIG Windows Mobile Messaging Wireless EChecklist Version 5,Release 2.4, Version 5 Release 2.4]

Personal digital assistants (PDAs) and Smart phones with still and/or video cameras should not be allowed in the facility, unless specifically approved in the physical security policies, and should be prohibited in a SCIF or areas where classified information is stored, processed, or transmitted.
Examine the organization's physical security policy to verify it addresses PDA devices, Smart phones, and other devices that contain cameras. Verify users are aware of these requirements through the use of posted signs, user agreements, and/or training. [§ 5 (WIR0371), § 5 (WIR0372), DISA WIRELESS SECURITY CHECKLIST, Version 5, Release 2.2, Version 5, Release 2.2]