11.1 (L2) Ensure 'Allow Camera' is set to 'Not allowed'

Information

This policy setting controls whether the use of Camera devices on the machine are permitted.

The recommended state for this setting is: Not allowed

Cameras in a high security environment can pose serious privacy and data exfiltration risks - they should be disabled to help mitigate that risk.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Not allowed :

Camera\Allow Camera

Impact:

Users will not be able to utilize the camera on a system.

See Also

https://workbench.cisecurity.org/benchmarks/16853

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7

Plugin: Windows

Control ID: 7632a0565042753f3773aba49dc7ab98e8b5e0d70523d566db28254d2e341573