MobileIron - CIS Google Android v1.3.0 L1

Audit Details

Name: MobileIron - CIS Google Android v1.3.0 L1

Updated: 3/7/2023

Authority: CIS

Plugin: MDM

Revision: 1.7

Estimated Item Count: 34

File Details

Filename: CIS_Google_Android_L1_v1.3.0-MobileIron.audit

Size: 50.1 kB

MD5: 94217156026fc48b614ec3c07f2b6e3e
SHA256: 57f800413463b4324d85a49cdfed21aef2b362b7c87584c6777e19c5d814d66e

Audit Items

DescriptionCategories
1.1 Ensure device firmware is up to date
1.2 Ensure 'Screen Lock' is set to 'Enabled'

ACCESS CONTROL

1.3 Ensure 'Make pattern visible' is set to 'Disabled' (if using a pattern as device lock mechanism)

CONFIGURATION MANAGEMENT

1.4 Ensure 'Automatically Lock' is set to 'Immediately'

IDENTIFICATION AND AUTHENTICATION

1.5 Ensure 'Power button instantly locks' is set to 'Enabled'

IDENTIFICATION AND AUTHENTICATION

1.6 Ensure 'Lock Screen Message' is configured
1.9 Ensure 'Developer Options' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.10 Ensure 'Install unknown apps' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.11 Do not root your device

CONFIGURATION MANAGEMENT

1.15 Ensure 'Use network-provided time' and 'Use network-provided time zone' are set to 'Enabled'
1.16 Ensure 'Remotely locate this device' is set to 'Enabled'
1.17 Ensure 'Allow remote lock and erase' is set to 'Enabled'
1.18 Ensure 'Scan device for security threats' is set to 'Enabled'
1.19 Ensure 'Improve harmful app detection' is set to 'Enabled'
1.20 Ensure 'Ask for unlock pattern/PIN/password before unpinning' is set to 'Enabled'
1.21 Ensure 'Screen timeout' is set to '1 minute or less'

ACCESS CONTROL

1.22 Ensure 'Wi-Fi assistant' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.23 Keep device Apps up to date
1.24 Ensure 'Add users from lock screen' is set to 'Disabled'

CONFIGURATION MANAGEMENT

1.25 Ensure 'Guest profiles' do not exist
1.26 Review app permissions periodically
1.27 Ensure 'Instant apps' is set to 'Disabled'

CONFIGURATION MANAGEMENT

2.1 Ensure 'Lock screen' is set to 'Don't show notifications at all'
2.4 Ensure 'Web and App Activity' is set to 'Disabled'

CONFIGURATION MANAGEMENT

2.5 Ensure 'Device Information' is set to 'Disabled'

CONFIGURATION MANAGEMENT

2.6 Ensure 'Voice & Audio Activity' is set to 'Disabled'

CONFIGURATION MANAGEMENT

2.7 Ensure 'YouTube Search History' is set to 'Disabled'

CONFIGURATION MANAGEMENT

2.8 Ensure 'YouTube Watch History' is set to 'Disabled'

CONFIGURATION MANAGEMENT

2.9 Ensure 'Google Location History' is set to 'Disabled'

CONFIGURATION MANAGEMENT

2.10 Ensure 'Opt out of Ads Personalization' is set to 'Enabled'
3.1 Ensure 'Microphone' is set to 'Enabled'

ACCESS CONTROL

3.2 Ensure 'Location' is set to 'Enabled'
3.3 Ensure 'Allow third-party cookies' is set to 'Disabled'

CONFIGURATION MANAGEMENT

3.4 Ensure 'Safe Browsing' is set to 'Enabled'