Built-in cameras must be disabled unless allowed by physical security policies.

From Windows 8/8.1 Security Technical Implementation Guide

Associated with IA controls: ECSC-1

Associated with: CCI-000381

SV-48440r2_rule Built-in cameras must be disabled unless allowed by physical security policies.

Vulnerability discussion

Cameras can capture still pictures and video of sensitive information. There is also a potential for remote access, and cameras must be turned off unless approved by local policy.

Check content

Verify built-in cameras are turned off unless allowed by physical security policies. View status in device manager. If cameras have not been disabled per physical security policies, this is a finding. If the system does not have cameras, this is not applicable.

Fix text

Disable built-in cameras in device manager unless allowed by physical security policies.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.