SC.L2-3.13.12
Collaborative Device Control
Source and approval
CMMC Assessment Guide — Level 2 · Revision 2.13
Publisher approved · Complete cited source edition 2026-10-31
Read the official guideSee SC.L2-3.13.12 in the reference catalog with its NIST cross-references
Official requirement
Prohibit remote activation of collaborative computing devices and provide indication of devices in use to users present at the device.
Assessment objectives
a. collaborative computing devices are identified;
b. collaborative computing devices provide indication to users of devices in use; and
c. remote activation of collaborative computing devices is prohibited.
Implementation guidance
Editorial examples to help you plan. Adapt them to your environment; the official requirement and objectives remain authoritative.
In plain language
Prevent remote activation of collaborative devices and show local users when devices are in use.
Implementation example
Example from the source assessment guide (not a mandatory implementation): A group of remote employees at your company routinely collaborate using cameras and microphones attached to their computers [a]. To prevent the misuse of these devices, you disable the ability to turn on cameras or microphones remotely [c]. You ensure the machines alert users when the camera or microphone are in use with a light beside the camera and an onscreen notification [b]. Although remote activation is blocked, this enables users to see if the devices are active.
Evidence examples
Examples suggested by the source guide (not an exhaustive or mandatory checklist): System and communications protection policy; procedures addressing collaborative computing; access control policy and procedures; system security plan; system design doc umentation; system audit logs and records; system configuration settings and associated documentation; other relevant documents or records
Common mistakes
Relying on software settings without providing the required user-visible indication.