Built-in microphones must be disabled on mobile devices unless required and approved by the organization.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36765	WN08-MO-000010	SV-48442r1_rule	ECSC-1	Medium

Description
Microphones can capture audio of sensitive information. There is also a potential for remote access, and microphones must be turned off unless approved by local policy.

STIG	Date
Windows 8 Security Technical Implementation Guide	2014-01-07

Details

Check Text ( C-45106r1_chk )
Verify microphones are turned off unless approved by the organization. View status in device manager. If built-in microphones are not approved by local policy or disabled, this is a finding. If the system does not have built-in microphones, this is not applicable.

Fix Text (F-41569r1_fix)
Disable microphones in device manager if not organizationally approved.