{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"cyber_security","domain":["Physical & Environmental Security","Data Protection & Privacy"],"inherent_rating":"low","taxonomy":["iso-27005-threat"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aphys-remote-spying-shoulder-surfing","description":"Observation of screens, documents, or activities from a distance (shoulder surfing, optical surveillance) and interception of compromising emanation signals capture sensitive information without system access.","details":{"category":"cyber_security","impact":"low","inherent_rating":"low","likelihood":"medium","risk_id":"phys-remote-spying-shoulder-surfing","taxonomies":["iso-27005-threat"],"treatment":"mitigate"},"id":"risk:phys-remote-spying-shoulder-surfing","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aphys-remote-spying-shoulder-surfing","sourceIds":["iso-27001","nist-800-53"],"sourceUrl":null,"title":"Remote spying and shoulder-surfing of screens/documents","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:270eca224019349774b8308b7156310049169a051491b352d3a28ba8bfb1b98c","properties":{"rationale":"Defining security controls for alternate-site work reduces shoulder-surfing and observation in public/remote settings.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-phys-11-d74b621d.json","sourceId":"uc:UC-PHYS-11","targetDetailPath":"/data/v1/records/risk-phys-remote-spying-shoulder-surfing-3b0c78f1.json","targetId":"risk:phys-remote-spying-shoulder-surfing","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:550930d9ca253bdb8ce94ee7155f5695041df51c97429877fc569803c2556726","properties":{"rationale":"Positioning and component placement to reduce observation opportunities limit distant/optical surveillance of screens and activities.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-phys-04-91db5045.json","sourceId":"uc:UC-PHYS-04","targetDetailPath":"/data/v1/records/risk-phys-remote-spying-shoulder-surfing-3b0c78f1.json","targetId":"risk:phys-remote-spying-shoulder-surfing","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:78a73324809c9cbd545d0a800e1799ecf6804d6e648b2ce6656181df49fac7e6","properties":{"rationale":"Shielding, separation, and placement to prevent electromagnetic emanations are the sole first-order defense against the emanation-interception vector this risk names.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-phys-07-d0fb7457.json","sourceId":"uc:UC-PHYS-07","targetDetailPath":"/data/v1/records/risk-phys-remote-spying-shoulder-surfing-3b0c78f1.json","targetId":"risk:phys-remote-spying-shoulder-surfing","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8dd88f689864331838c5d70950b675d5363809a4247529a636d278d3a7948da8","properties":{"rationale":"Clear-screen and clear-desk rules directly prevent shoulder-surfing and observation of sensitive screens and documents.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-phys-09-4af49d6c.json","sourceId":"uc:UC-PHYS-09","targetDetailPath":"/data/v1/records/risk-phys-remote-spying-shoulder-surfing-3b0c78f1.json","targetId":"risk:phys-remote-spying-shoulder-surfing","type":"mitigates"}],"schemaVersion":1}