unified
UC-NET-12 — Restrict communication-capable devices, ports, and sensors
Prohibit remote activation of collaborative computing devices (cameras, microphones, shared whiteboards) except where explicitly authorized, and give people present an explicit indication of use. Physically or logically disable unneeded connection ports and input/output devices, and restrict on-board sensor capability and the use of sensor-collected data. Define, authorize, and enforce documented usage restrictions for components subject to them.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- Network & Communications Security
- type
- preventive
- category
- technical
Details
- unified_id
- UC-NET-12
- title
- Restrict communication-capable devices, ports, and sensors
- statement
- Prohibit remote activation of collaborative computing devices (cameras, microphones, shared whiteboards) except where explicitly authorized, and give people present an explicit indication of use. Physically or logically disable unneeded connection ports and input/output devices, and restrict on-board sensor capability and the use of sensor-collected data. Define, authorize, and enforce documented usage restrictions for components subject to them.
- domain
- Network & Communications Security
- control_type
- preventive
- control_category
- technical
- members
- framework
- nist-800-53
- control_id
- SC-15
- coverage
- full
- relationship
- superset_of
- framework
- nist-800-53
- control_id
- SC-41
- coverage
- full
- relationship
- superset_of
- framework
- nist-800-53
- control_id
- SC-42
- coverage
- full
- relationship
- superset_of
- framework
- nist-800-53
- control_id
- SC-43
- coverage
- full
- relationship
- superset_of
- guidance
Source
No record-specific source URL is provided.
Connections
- UC-NET-12 — Restrict communication-capable devices, ports, and sensors mitigates Data exfiltration and theft of information by attackers
- strength
- primary
- rationale
- Disabling unneeded I/O ports/devices blocks removable-media exfiltration, and prohibiting remote camera/mic activation prevents espionage collection.
- Security Control Assessment & POA&M Remediation tests UC-NET-12 — Restrict communication-capable devices, ports, and sensors
- UC-NET-12 — Restrict communication-capable devices, ports, and sensors maps_to SC-43 — Usage Restrictions
- framework
- nist-800-53
- control_id
- SC-43
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- Endpoint, Media & Information Handling Custody operates UC-NET-12 — Restrict communication-capable devices, ports, and sensors
- UC-NET-12 — Restrict communication-capable devices, ports, and sensors maps_to SC-15 — Collaborative Computing Devices and Applications
- framework
- nist-800-53
- control_id
- SC-15
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-NET-12 — Restrict communication-capable devices, ports, and sensors mitigates Malware delivery, insertion and compromise of systems
- strength
- related
- rationale
- Disabling unneeded I/O device ports removes the removable-media vector for malware delivery.
- UC-NET-12 — Restrict communication-capable devices, ports, and sensors maps_to SC-42 — Sensor Capability and Data
- framework
- nist-800-53
- control_id
- SC-42
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-NET-12 — Restrict communication-capable devices, ports, and sensors mitigates Adversary reconnaissance and information gathering
- strength
- related
- rationale
- Prohibiting remote activation of cameras/microphones and restricting sensor data denies an adversary a surveillance/collection channel.
- UC-NET-12 — Restrict communication-capable devices, ports, and sensors maps_to SC-41 — Port and I/O Device Access
- framework
- nist-800-53
- control_id
- SC-41
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.