Site physical security policy must include a statement if PDAs and smartphones with digital cameras (still and video) are allowed in the facility.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-24953	WIR-SPP-001	SV-30690r3_rule	ECWN-1	Low

Description
Wireless phones with cameras are easily used to photograph sensitive information and areas if not addressed. Sites must establish, document, and train on how to mitigate this threat.

STIG	Date
Smartphone Policy Security Technical Implementation Guide	2011-06-20

Details

Check Text ( C-31111r2_chk )
Work with traditional reviewer to review site’s physical security policy. Verify that the site addresses PDAs and smartphones with embedded cameras. - Mark this as a finding if there is no written physical security policy outlining whether wireless phones with cameras are permitted or prohibited on or in this DoD facility.

Fix Text (F-27579r1_fix)
Update the security documentation as required.