SC-42(3) — Prohibit Use of Devices

Prohibit the use of certain sensor-equipped devices in sensitive areas where unauthorized data collection poses a significant risk.

Example 1: Ban personal cell phones and smart watches from SCIFs, server rooms, and classified work areas. Post signs at entry points and provide secure storage lockers outside the controlled area.

Example 2: Prohibit the use of IoT devices (smart speakers, smart displays, connected thermostats) in areas where sensitive conversations occur. These devices may transmit audio or environmental data to cloud services outside your control.