Built-in cameras must be disabled unless allowed by physical security policies.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36763	WN08-MO-000009	SV-48440r1_rule	ECSC-1	Medium

Description
Cameras can capture still pictures and video of sensitive information. There is also a potential for remote access, and cameras must be turned off unless approved by local policy.

STIG	Date
Windows 8 Security Technical Implementation Guide	2014-01-07

Details

Check Text ( C-45105r1_chk )
Verify built-in cameras are turned off unless allowed by physical security policies. View status in device manager. If cameras have not been disabled per physical security policies, this is a finding. If the system does not have cameras, this is not applicable.

Fix Text (F-41568r1_fix)
Disable built-in cameras in device manager unless allowed by physical security policies.