GOOG-12-002800 - Google Android 12 must be configured to enable audit logging.

800-53|AU-6(4)

CAT|II

CCI|CCI-000154

Rule-ID|SV-250385r802707_rule

STIG-ID|GOOG-12-002800

Vuln-ID|V-250385

GOOG-12-006000 - Google Android 12 must be configured to enforce a minimum password length of six characters.

800-53|IA-5(1)(a)

CCI|CCI-000205

Rule-ID|SV-250386r802710_rule

STIG-ID|GOOG-12-006000

Vuln-ID|V-250386

GOOG-12-006100 - Google Android 12 must be configured to not allow passwords that include more than two repeating or sequential characters - Characters

800-53|CM-6b.

CCI|CCI-000366

Rule-ID|SV-250387r802713_rule

STIG-ID|GOOG-12-006100

Vuln-ID|V-250387

GOOG-12-006100 - Google Android 12 must be configured to not allow passwords that include more than two repeating or sequential characters - Numbers

GOOG-12-006200 - Google Android 12 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.

800-53|AC-11a.

CCI|CCI-000057

Rule-ID|SV-250388r802716_rule

STIG-ID|GOOG-12-006200

Vuln-ID|V-250388

GOOG-12-006300 - Google Android 12 must be configured to lock the display after 15 minutes (or less) of inactivity.

Rule-ID|SV-250389r802719_rule

STIG-ID|GOOG-12-006300

Vuln-ID|V-250389

GOOG-12-006400 - Google Android 12 must be configured to not allow more than 10 consecutive failed authentication attempts.

800-53|AC-7a.

CCI|CCI-000044

Rule-ID|SV-250390r802722_rule

STIG-ID|GOOG-12-006400

Vuln-ID|V-250390

GOOG-12-006500 - Google Android 12 must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DoD-approved commercial app repository, MDM server, mobile application store].

Rule-ID|SV-250391r802725_rule

STIG-ID|GOOG-12-006500

Vuln-ID|V-250391

GOOG-12-006600 - Google Android 12 must be configured to enforce an application installation policy by specifying an application allowlist that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].

800-53|CM-7(2)

CCI|CCI-001764

Rule-ID|SV-250392r802728_rule

STIG-ID|GOOG-12-006600

Vuln-ID|V-250392

GOOG-12-006700 - Google Android 12 allowlist must be configured to not include applications with the following characteristics: 1. Back up mobile device (MD) data to non-DoD cloud servers (including user and application access to cloud backup services);2. Transmit MD diagnostic data to non-DoD servers;3. Voice assistant application if available when MD is locked;4. Voice dialing application if available when MD is locked;5. Allows synchronization of data or applications between devices associated with user; and6. Allows unencrypted (or encrypted but not FIPS 140-2 validated) data sharing with other MDs or printers.

Rule-ID|SV-250393r802792_rule

STIG-ID|GOOG-12-006700

Vuln-ID|V-250393

GOOG-12-006800 - Google Android 12 must be configured to not display the following (work profile) notifications when the device is locked: [selection:- email notifications - calendar appointments - contact associated with phone call notification - text message notification- other application-based notifications- all notifications].

800-53|AC-11(1)

CCI|CCI-000060

Rule-ID|SV-250394r802733_rule

STIG-ID|GOOG-12-006800

Vuln-ID|V-250394

GOOG-12-007200 - Google Android 12 must be configured to disable trust agents - NOTE: This requirement is not applicable (NA) for specific biometric authentication factors included in the product's Common Criteria evaluation.

800-53|IA-2(3)

CCI|CCI-000767

Rule-ID|SV-250395r802736_rule

STIG-ID|GOOG-12-007200

Vuln-ID|V-250395

GOOG-12-007400 - Google Android 12 must be configured to disable developer modes.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-250396r802794_rule

STIG-ID|GOOG-12-007400

Vuln-ID|V-250396

GOOG-12-007700 - Google Android 12 must be configured to display the DoD advisory warning message at startup or each time the user unlocks the device.

800-53|AC-8a.

CAT|III

CCI|CCI-000048

Rule-ID|SV-250397r802796_rule

STIG-ID|GOOG-12-007700

Vuln-ID|V-250397

GOOG-12-007800 - Google Android 12 must be configured to generate audit records for the following auditable events: detected integrity violations.

800-53|AU-12a.

CCI|CCI-000169

Rule-ID|SV-250398r802798_rule

STIG-ID|GOOG-12-007800

Vuln-ID|V-250398

GOOG-12-008400 - Google Android 12 must be configured to disable USB mass storage mode.

800-53|SC-41

CCI|CCI-002546

Rule-ID|SV-250399r802800_rule

STIG-ID|GOOG-12-008400

Vuln-ID|V-250399

GOOG-12-008500 - Google Android 12 must be configured to not allow backup of [all applications, configuration data] to locally connected systems.

800-53|SC-4

CCI|CCI-001090

Rule-ID|SV-250400r802751_rule

STIG-ID|GOOG-12-008500

Vuln-ID|V-250400

GOOG-12-008600 - Google Android 12 must be configured to not allow backup of [all applications, configuration data] to remote systems.

Rule-ID|SV-250401r802752_rule

STIG-ID|GOOG-12-008600

Vuln-ID|V-250401

GOOG-12-009000 - Google Android 12 must be configured to disable multiuser modes.

800-53|AC-2a.

CCI|CCI-002110

Rule-ID|SV-250402r802802_rule

STIG-ID|GOOG-12-009000

Vuln-ID|V-250402

GOOG-12-009400 - Google Android 12 must be configured to disable Bluetooth or configured via User Based Enforcement (UBE) to allow Bluetooth for only Headset Profile (HSP), Hands-Free Profile (HFP), and Serial Port Profile (SPP).

800-53|CM-7(1)(b)

CCI|CCI-001761

Rule-ID|SV-250403r802758_rule

STIG-ID|GOOG-12-009400

Vuln-ID|V-250403

GOOG-12-009500 - Google Android 12 must be configured to disable ad hoc wireless client-to-client connection capability.

800-53|SC-40

CCI|CCI-002536

Rule-ID|SV-250404r802790_rule

STIG-ID|GOOG-12-009500

Vuln-ID|V-250404

GOOG-12-009800 - Google Android 12 users must complete required training.

Rule-ID|SV-250405r802762_rule

STIG-ID|GOOG-12-009800

Vuln-ID|V-250405

GOOG-12-009900 - Google Android 12 must be configured to enforce that Wi-Fi Sharing is disabled.

Rule-ID|SV-250406r802763_rule

STIG-ID|GOOG-12-009900

Vuln-ID|V-250406

GOOG-12-010000 - Google Android 12 must have the DoD root and intermediate PKI certificates installed.

Rule-ID|SV-250407r802764_rule

STIG-ID|GOOG-12-010000

Vuln-ID|V-250407

GOOG-12-010200 - Google Android 12 work profile must be configured to enforce the system application disable list.

Rule-ID|SV-250408r802767_rule

STIG-ID|GOOG-12-010200

Vuln-ID|V-250408

GOOG-12-010400 - Google Android 12 work profile must be configured to disable automatic completion of work space Internet browser text input.

Rule-ID|SV-250409r802770_rule

STIG-ID|GOOG-12-010400

Vuln-ID|V-250409

GOOG-12-010600 - Google Android 12 must be configured to disallow configuration of date and time.

Rule-ID|SV-250410r802771_rule

STIG-ID|GOOG-12-010600

Vuln-ID|V-250410

GOOG-12-010800 - Android 12 devices must have the latest available Google Android 12 operating system installed.

CAT|I

Rule-ID|SV-250411r802772_rule

STIG-ID|GOOG-12-010800

Vuln-ID|V-250411

GOOG-12-010900 - Android 12 devices must be configured to disable the use of third-party keyboards.

Rule-ID|SV-250412r802773_rule

STIG-ID|GOOG-12-010900

Vuln-ID|V-250412

GOOG-12-011000 - Android 12 devices must be configured to enable Common Criteria Mode (CC Mode).

Rule-ID|SV-250413r802774_rule

STIG-ID|GOOG-12-011000

Vuln-ID|V-250413

GOOG-12-012100 - Google Android 12 must allow only the administrator (EMM) to install/remove DoD root and intermediate PKI certificates.

800-53|CM-6(1)

CCI|CCI-000370

Rule-ID|SV-250416r802781_rule

STIG-ID|GOOG-12-012100

Vuln-ID|V-250416

GOOG-12-012200 - Google Android 12 must be configured to disable all data signaling over [assignment: list of externally accessible hardware ports (for example, USB)].

800-53|AC-6(10)

CCI|CCI-002235

Rule-ID|SV-250417r802782_rule

STIG-ID|GOOG-12-012200

Vuln-ID|V-250417

Detections

Analytics

AirWatch - DISA Google Android 12 COBO v1r1

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

Revision 1.0

Miscellaneous


Revision 1.2 Mar 7, 2023 Miscellaneous Metadata updated. References updated. Variables updated.
Revision 1.1 Dec 7, 2022 Miscellaneous Metadata updated.
Revision 1.0 Jul 27, 2022 Miscellaneous Metadata updated.

Detections

Analytics

AirWatch - DISA Google Android 12 COBO v1r1 Download File

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

Revision 1.0

Miscellaneous

AirWatch - DISA Google Android 12 COBO v1r1