STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Policy Security Requirements Guide Version: 1 Release: 4 Benchmark Date: 05 Jan 2026: STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Policy Security Requirements Guide Version: 1 Release: 4 Benchmark Date: 05 Jan 2026:SV-259891r1173862_rule
V-259891
SRG-VOIP-000110
SRG-VOIP-000110
CAT II
10
Ensure a policy and procedure is in place and enforced that addresses the placement and operation of hardware-based voice and video communications devices and PC-based voice, video, UC, and collaboration communications applications with regard to their audio pickup and broadcast capabilities in relation to the sensitivity of the information communicated. Operational policy and procedures must be included in user training and guides.
Produce an SOP that addresses the operation of hardware-based voice and video communications devices and PC-based voice, video, UC, and collaboration communications applications with regard to their audio pickup and broadcast capabilities in relation to the sensitivity of the information communicated.
Such an SOP should:
- Include policy on the use of headsets containing short-range microphones and earphones in lieu of long-range microphones and speakers in an open office environment.
- Address the volume settings of speakers so session information is not heard by nonparticipants in a work area.
- Address the potential for the pickup of nonsession-related conversations in the work area.
Provide appropriate training so users follow the SOP. Enforce user compliance with the SOP.
Verify a policy and procedure is in place and enforced that addresses the placement and operation of hardware-based voice and video communications devices and PC-based voice, video, UC, and collaboration communications applications with regard to their audio pickup and broadcast capabilities in relation to the sensitivity of the information communicated. Operational policy and procedures must be included in user training and guides.
NOTE: This standard operating procedure (SOP) should take into account the classification of the area where the video teleconferencing unit (VTU) or PC supporting a PC-based voice, video, UC, and collaboration communications applications is installed as well as the classification and need-to-know restraints of the information generally communicated via the facility or specific VTU. Measures should also be included such as closing office or conference room doors, muting microphones before and after conference sessions and during conference breaks, volume levels in open offices, and muting the microphone when not speaking.
Inspect the applicable SOP.
Such an SOP should:
- Include policy on the use of headsets containing short-range microphones and earphones in lieu of long-range microphones and speakers in an open office environment.
- Address the volume settings of speakers so session information is not heard by nonparticipants in a work area.
- Address the potential for the pickup of nonsession-related conversations in the work area.
- Discuss Bluetooth, DECT/DECT 6.0, and other RF wireless technologies for accessories.
Inspect user training materials and discuss practices to determine if information regarding the SOP is conveyed.
Interview a random sampling of users to confirm their awareness of the SOP and related information.
If the SOP or training is deficient, this is a finding.
V-259891
False
SRG-VOIP-000110
Verify a policy and procedure is in place and enforced that addresses the placement and operation of hardware-based voice and video communications devices and PC-based voice, video, UC, and collaboration communications applications with regard to their audio pickup and broadcast capabilities in relation to the sensitivity of the information communicated. Operational policy and procedures must be included in user training and guides.
NOTE: This standard operating procedure (SOP) should take into account the classification of the area where the video teleconferencing unit (VTU) or PC supporting a PC-based voice, video, UC, and collaboration communications applications is installed as well as the classification and need-to-know restraints of the information generally communicated via the facility or specific VTU. Measures should also be included such as closing office or conference room doors, muting microphones before and after conference sessions and during conference breaks, volume levels in open offices, and muting the microphone when not speaking.
Inspect the applicable SOP.
Such an SOP should:
- Include policy on the use of headsets containing short-range microphones and earphones in lieu of long-range microphones and speakers in an open office environment.
- Address the volume settings of speakers so session information is not heard by nonparticipants in a work area.
- Address the potential for the pickup of nonsession-related conversations in the work area.
- Discuss Bluetooth, DECT/DECT 6.0, and other RF wireless technologies for accessories.
Inspect user training materials and discuss practices to determine if information regarding the SOP is conveyed.
Interview a random sampling of users to confirm their awareness of the SOP and related information.
If the SOP or training is deficient, this is a finding.
M
5585