The organization must explicitly specify in each sites physical security policy whether CMDs, containing cameras, are permitted at that site.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-35977	SRG-MPOL-059	SV-47293r1_rule		Low

Description
CMDs with cameras are easily used to photograph sensitive information and areas if not addressed. Sites must establish, document, and train on how to mitigate this threat.

STIG	Date
Mobile Policy Security Requirements Guide	2013-07-03

Details

Check Text ( C-44214r1_chk )
Review site's physical security policy. Verify the site addresses CMDs with embedded cameras. If there is no written physical security policy outlining whether CMDs with cameras are permitted or prohibited on or in the DoD facility, this is a finding.

Fix Text (F-40504r1_fix)
Update the security documentation to include a statement of whether CMDs with cameras (still and video) are allowed in the facility.