| 1.1.1 - MobileIron - Update firmware to latest version | CONFIGURATION MANAGEMENT |
| 1.1.2 - MobileIron - Enable Passcode Lock - 'Passcode Required = on' | ACCESS CONTROL |
| 1.1.4 - MobileIron - Set Auto-lock - 'Inactivity Timeout <= 2' | ACCESS CONTROL |
| 1.1.12 - MobileIron - Turn off VPN when not needed | ACCESS CONTROL |
| 1.1.13 - MobileIron - Turn off Bluetooth when not needed | ACCESS CONTROL |
| 1.1.17 - MobileIron - Enable Automatic Downloads of App Updates | ACCESS CONTROL |
| 1.1.19 - MobileIron - Erase all data before return, recycle, reassignment, or other disposition | ACCESS CONTROL |
| 1.2.2 - MobileIron - Enable Fraudulent Website Warning | ACCESS CONTROL, CONFIGURATION MANAGEMENT |
| 2.1.1 - MobileIron - Set Security to disallow profile removal | ACCESS CONTROL |
| 2.2.1 - MobileIron - Require passcode on device | ACCESS CONTROL |
| 2.2.2 - MobileIron - Do Not Allow Simple Value | IDENTIFICATION AND AUTHENTICATION |
| 2.2.4 - MobileIron - Set minimum passcode length | IDENTIFICATION AND AUTHENTICATION |
| 2.2.6 - MobileIron - Set Maximum Auto-lock | ACCESS CONTROL |
| 2.2.7 - MobileIron - Set Maximum number of failed attempts | ACCESS CONTROL |
| 3.1.1 - MobileIron - Enable 'Require password' | ACCESS CONTROL |
| 3.1.3 - MobileIron - Set the 'minimum password length' | IDENTIFICATION AND AUTHENTICATION |
| 3.1.5 - MobileIron - Set the 'timeout' for 'Time without user input before password must be re-entered (in minutes)' | ACCESS CONTROL |
| 3.1.6 - MobileIron - Limit the 'Number of failed attempts allowed' | ACCESS CONTROL |
