GOOG-10-000100 - Google Android 10 must be configured to enforce a minimum password length of six characters.

800-53|IA-5(1)

CAT|II

CCI|CCI-000205

Rule-ID|SV-108025r1_rule

STIG-ID|GOOG-10-000100

Vuln-ID|V-98921

GOOG-10-000200 - Google Android 10 must be configured to not allow passwords that include more than two repeating or sequential characters - Minimum complex characters

800-53|AC-19

CCI|CCI-000366

Rule-ID|SV-108027r1_rule

STIG-ID|GOOG-10-000200

Vuln-ID|V-98923

GOOG-10-000200 - Google Android 10 must be configured to not allow passwords that include more than two repeating or sequential characters - Type

GOOG-10-000300 - Google Android 10 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.

800-53|AC-11

CCI|CCI-000057

Rule-ID|SV-108029r1_rule

STIG-ID|GOOG-10-000300

Vuln-ID|V-98925

GOOG-10-000400 - Google Android 10 must be configured to lock the display after 15 minutes (or less) of inactivity.

Rule-ID|SV-108031r2_rule

STIG-ID|GOOG-10-000400

Vuln-ID|V-98927

GOOG-10-000500 - Google Android 10 must be configured to not allow more than 10 consecutive failed authentication attempts.

800-53|AC-7(2)

CAT|III

CCI|CCI-000044

Rule-ID|SV-108033r1_rule

STIG-ID|GOOG-10-000500

Vuln-ID|V-98929

GOOG-10-000800 - Google Android 10 must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DoD-approved commercial app repository, MDM server, mobile application store].

CCI|CCI-001806

CSCv6|2.2

Rule-ID|SV-108035r1_rule

STIG-ID|GOOG-10-000800

Vuln-ID|V-98931

GOOG-10-001000 - Google Android 10 must be configured to enforce an application installation policy by specifying an application whitelist that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].

800-53|CM-7(5)

800-53|CM-8

Rule-ID|SV-108037r1_rule

STIG-ID|GOOG-10-001000

Vuln-ID|V-98933

GOOG-10-001100 - Google Android 10 whitelist must be configured to not include applications with the following characteristics: - back up MD data to non-DoD cloud servers (including user and application access to cloud backup services); - transmit MD diagnostic data to non-DoD servers; - voice assistant application if available when MD is locked; - voice dialing application if available when MD is locked; - allows synchronization of data or applications between devices associated with user; and - allows unencrypted (or encrypted but not FIPS 140-2 validated) data sharing with other MDs or printers.

800-53|CM-7(4)

Rule-ID|SV-108039r1_rule

STIG-ID|GOOG-10-001100

Vuln-ID|V-98935

GOOG-10-001400 - Google Android 10 must be configured to disable Bluetooth or configured via User Based Enforcement (UBE) to allow Bluetooth for only Headset Profile (HSP), HandsFree Profile (HFP), and Serial Port Profile (SPP) - Serial Port Profile capable devices.

800-53|CM-7

CCI|CCI-001761

Rule-ID|SV-108041r1_rule

STIG-ID|GOOG-10-001400

Vuln-ID|V-98937

GOOG-10-001600 - Google Android 10 must be configured to not display the following (work profile) notifications when the device is locked: [selection: - email notifications - calendar appointments - contact associated with phone call notification - text message notification - other application-based notifications - all notifications].

CCI|CCI-000051

Rule-ID|SV-108043r1_rule

STIG-ID|GOOG-10-001600

Vuln-ID|V-98939

GOOG-10-002300 - Google Android 10 must be configured to disable trust agents. Note: This requirement is not applicable (NA) for specific biometric authentication factors included in the products Common Criteria evaluation - NA for specific biometric authentication factors included in the products Common Criteria evaluation.

CCI|CCI-000370

CCI|CCI-000381

Rule-ID|SV-108045r1_rule

STIG-ID|GOOG-10-002300

Vuln-ID|V-98941

GOOG-10-002800 - Google Android 10 must be configured to disable developer modes.

Rule-ID|SV-108047r1_rule

STIG-ID|GOOG-10-002800

Vuln-ID|V-98943

GOOG-10-003400 - Google Android 10 must be configured to display the DoD advisory warning message at start-up or each time the user unlocks the device.

CCI|CCI-000048

Rule-ID|SV-108049r1_rule

STIG-ID|GOOG-10-003400

Vuln-ID|V-98945

GOOG-10-003500 - Google Android 10 must be configured to disable USB mass storage mode.

Rule-ID|SV-108051r1_rule

STIG-ID|GOOG-10-003500

Vuln-ID|V-98947

GOOG-10-003700 - Google Android 10 must be configured to not allow backup of [all applications, configuration data] to locally connected systems.

CCI|CCI-000097

CSCv6|9.1

Rule-ID|SV-108053r1_rule

STIG-ID|GOOG-10-003700

Vuln-ID|V-98949

GOOG-10-003900 - Google Android 10 must be configured to not allow backup of all applications and configuration data to remote systems.

CCI|CCI-002338

Rule-ID|SV-108055r1_rule

STIG-ID|GOOG-10-003900

Vuln-ID|V-98951

GOOG-10-004500 - Google Android 10 must be configured to disable exceptions to the access control policy that prevents application processes from accessing all data stored by other application processes - Copy/Paste

CCI|CCI-002191

Rule-ID|SV-108057r1_rule

STIG-ID|GOOG-10-004500

Vuln-ID|V-98953

GOOG-10-004500 - Google Android 10 must be configured to disable exceptions to the access control policy that prevents application processes from accessing all data stored by other application processes - Sharing data into the profile

GOOG-10-004700 - Google Android 10 must be configured to disable multi-user modes.

CCI|CCI-002110

Rule-ID|SV-108059r1_rule

STIG-ID|GOOG-10-004700

Vuln-ID|V-98955

GOOG-10-005505 - Google Android 10 must be configured to enable audit logging.

CCI|CCI-001851

Rule-ID|SV-108061r1_rule

STIG-ID|GOOG-10-005505

Vuln-ID|V-98957

GOOG-10-006100 - Google Android 10 must be configured to generate audit records for the following auditable events: detected integrity violations.

CCI|CCI-000169

Rule-ID|SV-108063r1_rule

STIG-ID|GOOG-10-006100

Vuln-ID|V-98959

GOOG-10-008700 - Google Android 10 users must complete required training.

Rule-ID|SV-108065r1_rule

STIG-ID|GOOG-10-008700

Vuln-ID|V-98961

GOOG-10-008800 - Google Android 10 must be configured to enforce that Wi-Fi Sharing is disabled.

Rule-ID|SV-108067r1_rule

STIG-ID|GOOG-10-008800

Vuln-ID|V-98963

GOOG-10-009000 - Google Android 10 must have the DoD root and intermediate PKI certificates installed.

Rule-ID|SV-108069r1_rule

STIG-ID|GOOG-10-009000

Vuln-ID|V-98965

GOOG-10-009100 - Google Android 10 must allow only the administrator (MDM) to install/remove DoD root and intermediate PKI certificates - MDM to install/remove DoD root and intermediate PKI certificates.

Rule-ID|SV-108071r1_rule

STIG-ID|GOOG-10-009100

Vuln-ID|V-98967

GOOG-10-009200 - The Google Android 10 Work Profile must be configured to prevent users from adding personal email accounts to the work email app.

Rule-ID|SV-108073r1_rule

STIG-ID|GOOG-10-009200

Vuln-ID|V-98969

GOOG-10-009400 - Google Android 10 work profile must be configured to enforce the system application disable list.

Rule-ID|SV-108075r1_rule

STIG-ID|GOOG-10-009400

Vuln-ID|V-98971

GOOG-10-009600 - Google Android 10 must be provisioned as a fully managed device and configured to create a work profile.

Rule-ID|SV-108077r1_rule

STIG-ID|GOOG-10-009600

Vuln-ID|V-98973

GOOG-10-009800 - Google Android 10 work profile must be configured to disable automatic completion of work space Internet browser text input.

Rule-ID|SV-108079r1_rule

STIG-ID|GOOG-10-009800

Vuln-ID|V-98975

GOOG-10-010000 - Google Android 10 Work Profile must be configured to disable the autofill services.

Rule-ID|SV-108081r1_rule

STIG-ID|GOOG-10-010000

Vuln-ID|V-98977

GOOG-10-010200 - Google Android 10 must be configured to disallow configuration of date and time.

Rule-ID|SV-108083r1_rule

STIG-ID|GOOG-10-010200

Vuln-ID|V-98979

GOOG-10-010400 - Google Android Pie must configured to disallow outgoing beam.

Rule-ID|SV-106469r1_rule

STIG-ID|GOOG-10-010400

Vuln-ID|V-97365

GOOG-10-010800 - Google Android 10 devices must have the latest available Google Android 10 operating system installed.

CAT|I

Rule-ID|SV-108085r1_rule

STIG-ID|GOOG-10-010800

Vuln-ID|V-98981

GOOG-10-011000 - Google Android 10 devices must be configured to disable the use of third-party keyboards.

Detections

Analytics

MobileIron - DISA Google Android 10.x v1r2

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.9

Miscellaneous

Revision 1.8

Miscellaneous

Revision 1.7

Miscellaneous

Revision 1.6

Miscellaneous

Revision 1.5

Miscellaneous

Revision 1.4

Miscellaneous

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.9 May 24, 2023 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.8 Mar 7, 2023 Miscellaneous Metadata updated. References updated. Variables updated.
Revision 1.7 Dec 7, 2022 Miscellaneous Metadata updated.
Revision 1.6 Jun 10, 2022 Miscellaneous Metadata updated.
Revision 1.5 Apr 25, 2022 Miscellaneous Metadata updated. References updated.
Revision 1.4 Jul 30, 2021 Miscellaneous Metadata updated. References updated.
Revision 1.3 Jun 17, 2021 Miscellaneous Metadata updated.
Revision 1.2 May 5, 2021 Miscellaneous Metadata updated. References updated.
Revision 1.1 Sep 29, 2020 Miscellaneous References updated.

Detections

Analytics

MobileIron - DISA Google Android 10.x v1r2 Download File

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Miscellaneous

Miscellaneous

Miscellaneous

Miscellaneous

Miscellaneous

Miscellaneous

Miscellaneous

Miscellaneous

Miscellaneous

MobileIron - DISA Google Android 10.x v1r2