id: os_prohibit_remote_activation_collab_devices
title: Prohibit Remote Activation of Collaborative Computing Devices
discussion: |-
  The inherent configuration of the macOS _IS_ in compliance.

  Apple has implemented a green light physically next to your camera that will glow when the camera is activated. There is an orange dot indicator by the Control Center pull down menu item to indicate when the system's microphone is listening or activated.

  The macOS has built into the system, the ability to grant or deny access to the camera and microphone which requires the application to have an entitlement to use the device.

  link:https://support.apple.com/guide/mac-help/use-the-built-in-camera-mchlp2980/mac[]

  link:https://support.apple.com/guide/mac-help/control-access-to-your-camera-mchlf6d108da/mac[]

  link:https://support.apple.com/guide/mac-help/control-access-to-your-microphone-on-mac-mchla1b1e1fe/12.0/mac/12.0[]

  NOTE: The technology partially supports this requirement and cannot be configured to be in full compliance.
references:
  nist:
    cce:
      macos_27:
        - CCE-XXXXX-X
      macos_26:
        - CCE-95268-9
      macos_15:
        - CCE-94265-6
      macos_14:
        - CCE-92861-4
    800-53r5:
      - SC-15
    800-171r3:
      - 03.13.12
  disa:
    cmmc:
      - SC.L2-3.13.12
platforms:
  macOS:
    '27.0': {}
    '26.0': {}
    '15.0': {}
    enforcement_info:
      fix:
        additional_info: The technology partially meets this requirement. An appropriate mitigation for the system must be implemented for full compliance.
tags:
  - 800-171
  - inherent
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
  - cnssi-1253_low
  - cnssi-1253_high
  - cmmc_lvl2
  - cnssi-1253_moderate
