GOOG-12-002800 - Google Android 12 must be configured to enable audit logging.

800-53|AU-6(4)

CAT|II

CCI|CCI-000154

Rule-ID|SV-250418r802621_rule

STIG-ID|GOOG-12-002800

Vuln-ID|V-250418

GOOG-12-006000 - Google Android 12 must be configured to enforce a minimum password length of six characters.

800-53|IA-5(1)(a)

CCI|CCI-000205

Rule-ID|SV-250419r802624_rule

STIG-ID|GOOG-12-006000

Vuln-ID|V-250419

GOOG-12-006100 - Google Android 12 must be configured to not allow passwords that include more than two repeating or sequential characters. - Characters

800-53|CM-6b.

CCI|CCI-000366

Rule-ID|SV-250420r802627_rule

STIG-ID|GOOG-12-006100

Vuln-ID|V-250420

GOOG-12-006100 - Google Android 12 must be configured to not allow passwords that include more than two repeating or sequential characters. - Numbers

GOOG-12-006200 - Google Android 12 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.

800-53|AC-11a.

CCI|CCI-000057

Rule-ID|SV-250421r802630_rule

STIG-ID|GOOG-12-006200

Vuln-ID|V-250421

GOOG-12-006300 - Google Android 12 must be configured to lock the display after 15 minutes (or less) of inactivity.

Rule-ID|SV-250422r802633_rule

STIG-ID|GOOG-12-006300

Vuln-ID|V-250422

GOOG-12-006400 - Google Android 12 must be configured to not allow more than 10 consecutive failed authentication attempts.

800-53|AC-7a.

CCI|CCI-000044

Rule-ID|SV-250423r802636_rule

STIG-ID|GOOG-12-006400

Vuln-ID|V-250423

GOOG-12-006500 - Google Android 12 must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DoD-approved commercial app repository, MDM server, mobile application store].

Rule-ID|SV-250424r802639_rule

STIG-ID|GOOG-12-006500

Vuln-ID|V-250424

GOOG-12-006600 - Google Android 12 must be configured to enforce an application installation policy by specifying an application allowlist that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].

800-53|CM-7(2)

CCI|CCI-001764

Rule-ID|SV-250425r802642_rule

STIG-ID|GOOG-12-006600

Vuln-ID|V-250425

GOOG-12-006700 - Google Android 12 allowlist must be configured to not include applications with the following characteristics: 1. Back up mobile device (MD) data to non-DoD cloud servers (including user and application access to cloud backup services);2. Transmit MD diagnostic data to non-DoD servers;3. Voice assistant application if available when MD is locked;4. Voice dialing application if available when MD is locked;5. Allows synchronization of data or applications between devices associated with user; and6. Allows unencrypted (or encrypted but not FIPS 140-2 validated) data sharing with other MDs or printers.

Rule-ID|SV-250426r802804_rule

STIG-ID|GOOG-12-006700

Vuln-ID|V-250426

GOOG-12-006800 - Google Android 12 must be configured to not display the following (work profile) notifications when the device is locked: [selection:- email notifications - calendar appointments - contact associated with phone call notification - text message notification- other application-based notifications- all notifications].

800-53|AC-11(1)

CCI|CCI-000060

Rule-ID|SV-250427r802647_rule

STIG-ID|GOOG-12-006800

Vuln-ID|V-250427

GOOG-12-007200 - Google Android 12 must be configured to disable trust agents - NOTE: This requirement is not applicable (NA) for specific biometric authentication factors included in the product's Common Criteria evaluation.

800-53|IA-2(3)

CCI|CCI-000767

Rule-ID|SV-250428r802650_rule

STIG-ID|GOOG-12-007200

Vuln-ID|V-250428

GOOG-12-007400 - Google Android 12 must be configured to disable developer modes.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-250429r802806_rule

STIG-ID|GOOG-12-007400

Vuln-ID|V-250429

GOOG-12-007700 - Google Android 12 must be configured to display the DoD advisory warning message at startup or each time the user unlocks the device.

800-53|AC-8a.

CAT|III

CCI|CCI-000048

Rule-ID|SV-250430r802808_rule

STIG-ID|GOOG-12-007700

Vuln-ID|V-250430

GOOG-12-007800 - Google Android 12 must be configured to generate audit records for the following auditable events: detected integrity violations.

800-53|AU-12a.

CCI|CCI-000169

Rule-ID|SV-250431r802810_rule

STIG-ID|GOOG-12-007800

Vuln-ID|V-250431

GOOG-12-008400 - Google Android 12 must be configured to disable USB mass storage mode.

800-53|SC-41

CCI|CCI-002546

Rule-ID|SV-250432r802812_rule

STIG-ID|GOOG-12-008400

Vuln-ID|V-250432

GOOG-12-008500 - Google Android 12 must be configured to not allow backup of [all applications, configuration data] to locally connected systems.

800-53|SC-4

CCI|CCI-001090

Rule-ID|SV-250433r802665_rule

STIG-ID|GOOG-12-008500

Vuln-ID|V-250433

GOOG-12-008600 - Google Android 12 must be configured to not allow backup of [all applications, configuration data] to remote systems.

Rule-ID|SV-250434r802666_rule

STIG-ID|GOOG-12-008600

Vuln-ID|V-250434

GOOG-12-008900 - Google Android 12 must be configured to disable exceptions to the access control policy that prevent [selection: application processes, groups of application processes] from accessing [selection: all, private] data stored by other [selection: application processes, groups of application processes].

800-53|AC-6(8)

800-53|SC-39

CCI|CCI-002233

CCI|CCI-002530

Rule-ID|SV-250435r802669_rule

STIG-ID|GOOG-12-008900

Vuln-ID|V-250435

GOOG-12-009000 - Google Android 12 must be configured to disable multiuser modes.

800-53|AC-2a.

CCI|CCI-002110

Rule-ID|SV-250436r802672_rule

STIG-ID|GOOG-12-009000

Vuln-ID|V-250436

GOOG-12-009400 - Google Android 12 must be configured to disable Bluetooth or configured via User Based Enforcement (UBE) to allow Bluetooth for only Headset Profile (HSP), Hands-Free Profile (HFP), and Serial Port Profile (SPP).

800-53|CM-7(1)(b)

CCI|CCI-001761

Rule-ID|SV-250437r802675_rule

STIG-ID|GOOG-12-009400

Vuln-ID|V-250437

GOOG-12-009500 - Google Android 12 must be configured to disable ad hoc wireless client-to-client connection capability.

800-53|SC-40

CCI|CCI-002536

Rule-ID|SV-250438r802788_rule

STIG-ID|GOOG-12-009500

Vuln-ID|V-250438

GOOG-12-009800 - Google Android 12 users must complete required training.

Rule-ID|SV-250439r802679_rule

STIG-ID|GOOG-12-009800

Vuln-ID|V-250439

GOOG-12-009900 - Google Android 12 must be configured to enforce that Wi-Fi Sharing is disabled.

Rule-ID|SV-250440r802680_rule

STIG-ID|GOOG-12-009900

Vuln-ID|V-250440

GOOG-12-010000 - Google Android 12 must have the DoD root and intermediate PKI certificates installed.

Rule-ID|SV-250441r802681_rule

STIG-ID|GOOG-12-010000

Vuln-ID|V-250441

GOOG-12-010100 - The Google Android 12 Work Profile must be configured to prevent users from adding personal email accounts to the work email app.

Rule-ID|SV-250442r802684_rule

STIG-ID|GOOG-12-010100

Vuln-ID|V-250442

GOOG-12-010200 - Google Android 12 work profile must be configured to enforce the system application disable list.

Rule-ID|SV-250443r802687_rule

STIG-ID|GOOG-12-010200

Vuln-ID|V-250443

GOOG-12-010300 - Google Android 12 must be provisioned as a fully managed device and configured to create a work profile.

Rule-ID|SV-250444r802688_rule

STIG-ID|GOOG-12-010300

Vuln-ID|V-250444

GOOG-12-010400 - Google Android 12 work profile must be configured to disable automatic completion of work space Internet browser text input.

Rule-ID|SV-250445r802691_rule

STIG-ID|GOOG-12-010400

Vuln-ID|V-250445

GOOG-12-010500 - Google Android 12 Work Profile must be configured to disable the autofill services.

Rule-ID|SV-250446r802694_rule

STIG-ID|GOOG-12-010500

Vuln-ID|V-250446

GOOG-12-010600 - Google Android 12 must be configured to disallow configuration of date and time.

Rule-ID|SV-250447r802695_rule

STIG-ID|GOOG-12-010600

Vuln-ID|V-250447

GOOG-12-010800 - Android 12 devices must have the latest available Google Android 12 operating system installed.

CAT|I

Rule-ID|SV-250448r802696_rule

STIG-ID|GOOG-12-010800

Vuln-ID|V-250448

GOOG-12-010900 - Android 12 devices must be configured to disable the use of third-party keyboards.

Rule-ID|SV-250449r802697_rule

STIG-ID|GOOG-12-010900

Vuln-ID|V-250449

GOOG-12-011000 - Android 12 devices must be configured to enable Common Criteria Mode (CC Mode).

Rule-ID|SV-250450r802698_rule

STIG-ID|GOOG-12-011000

Vuln-ID|V-250450

GOOG-12-012100 - Google Android 12 must allow only the administrator (EMM) to install/remove DoD root and intermediate PKI certificates.

800-53|CM-6(1)

CCI|CCI-000370

Rule-ID|SV-250453r802705_rule

STIG-ID|GOOG-12-012100

Vuln-ID|V-250453

GOOG-12-012200 - Google Android 12 must be configured to disable all data signaling over [assignment: list of externally accessible hardware ports (for example, USB)].

800-53|AC-6(10)

CCI|CCI-002235

Rule-ID|SV-250454r802706_rule

STIG-ID|GOOG-12-012200

Vuln-ID|V-250454

Detections

Analytics

AirWatch - DISA Google Android 12 COPE v1r1

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

Revision 1.0

Miscellaneous


Revision 1.2 Mar 7, 2023 Miscellaneous Metadata updated. References updated. Variables updated.
Revision 1.1 Dec 7, 2022 Miscellaneous Metadata updated.
Revision 1.0 Jul 27, 2022 Miscellaneous Metadata updated.

Detections

Analytics

AirWatch - DISA Google Android 12 COPE v1r1 Download File

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

Revision 1.0

Miscellaneous

AirWatch - DISA Google Android 12 COPE v1r1