GOOG-13-701100 - Google Android 13 must prohibit DOD VPN profiles in the Personal Profile.

CAT|III

CCI|CCI-000366

CCI|CCI-000370

Rule-ID|SV-258475r950986_rule

STIG-ID|GOOG-13-701100

Vuln-ID|V-258475

GOOG-13-706000 - Google Android 13 must be configured to enforce a minimum password length of six characters and not allow passwords that include more than four repeating or sequential characters.

CAT|II

CCI|CCI-000205

Rule-ID|SV-258476r929466_rule

STIG-ID|GOOG-13-706000

Vuln-ID|V-258476

GOOG-13-706200 - Google Android 13 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.

CCI|CCI-000057

Rule-ID|SV-258477r929469_rule

STIG-ID|GOOG-13-706200

Vuln-ID|V-258477

GOOG-13-706300 - Google Android 13 must be configured to lock the display after 15 minutes (or less) of inactivity - or less of inactivity.

Rule-ID|SV-258478r929472_rule

STIG-ID|GOOG-13-706300

Vuln-ID|V-258478

GOOG-13-706400 - Google Android 13 must be configured to not allow more than 10 consecutive failed authentication attempts.

CCI|CCI-000044

Rule-ID|SV-258479r929475_rule

STIG-ID|GOOG-13-706400

Vuln-ID|V-258479

GOOG-13-706500 - Google Android 13 must be configured to enforce an application installation policy by specifying one or more authorized application repositories.

Rule-ID|SV-258480r929478_rule

STIG-ID|GOOG-13-706500

Vuln-ID|V-258480

GOOG-13-706600 - Google Android 13 must be configured to enforce an application installation policy by specifying an application allowlist that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].

CCI|CCI-001764

Rule-ID|SV-258481r929481_rule

STIG-ID|GOOG-13-706600

Vuln-ID|V-258481

GOOG-13-706700 - Google Android 13 allowlist must be configured to not include applications with the following characteristics (work profile only):

Rule-ID|SV-258482r929484_rule

STIG-ID|GOOG-13-706700

Vuln-ID|V-258482

GOOG-13-706800 - Google Android 13 must be configured to not display the following (work profile) notifications when the device is locked:

CCI|CCI-000060

Rule-ID|SV-258483r929487_rule

STIG-ID|GOOG-13-706800

Vuln-ID|V-258483

GOOG-13-707200 - Google Android 13 must be configured to disable trust agents - NOTE: This requirement is not applicable (NA) for specific biometric authentication factors included in the product's Common Criteria evaluation.

CCI|CCI-000767

Rule-ID|SV-258484r930570_rule

STIG-ID|GOOG-13-707200

Vuln-ID|V-258484

GOOG-13-707700 - Google Android 13 must be configured to display the DOD advisory warning message at startup or each time the user unlocks the Work Profile.

CCI|CCI-000048

Rule-ID|SV-258485r929493_rule

STIG-ID|GOOG-13-707700

Vuln-ID|V-258485

GOOG-13-708600 - Google Android 13 must be configured to not allow backup of all work profile applications to remote systems.

CCI|CCI-001090

Rule-ID|SV-258486r929496_rule

STIG-ID|GOOG-13-708600

Vuln-ID|V-258486

GOOG-13-708900 - Google Android 13 must be configured to disable exceptions to the access control policy that prevent [selection: application processes, groups of application processes] from accessing [selection: all, private] data stored by other [selection: application processes, groups of application processes].

CCI|CCI-002233

CCI|CCI-002530

Rule-ID|SV-258487r929499_rule

STIG-ID|GOOG-13-708900

Vuln-ID|V-258487

GOOG-13-709800 - Google Android 13 users must complete required training.

Rule-ID|SV-258488r929502_rule

STIG-ID|GOOG-13-709800

Vuln-ID|V-258488

GOOG-13-710000 - Google Android 13 must have the DOD root and intermediate PKI certificates installed (work profile only).

Rule-ID|SV-258489r929505_rule

STIG-ID|GOOG-13-710000

Vuln-ID|V-258489

GOOG-13-710100 - The Google Android 13 work profile must be configured to prevent users from adding personal email accounts to the work email app.

Rule-ID|SV-258490r929508_rule

STIG-ID|GOOG-13-710100

Vuln-ID|V-258490

GOOG-13-710200 - The Google Android 13 work profile must be configured to enforce the system application disable list (work profile only).

Rule-ID|SV-258491r929511_rule

STIG-ID|GOOG-13-710200

Vuln-ID|V-258491

GOOG-13-710300 - Google Android 13 must be provisioned as a BYOAD device (Android work profile for employee-owned devices [BYOD]).

Rule-ID|SV-258492r929530_rule

STIG-ID|GOOG-13-710300

Vuln-ID|V-258492

GOOG-13-710400 - The Google Android 13 work profile must be configured to disable automatic completion of workspace internet browser text input.

Rule-ID|SV-258493r929517_rule

STIG-ID|GOOG-13-710400

Vuln-ID|V-258493

GOOG-13-710500 - The Google Android 13 work profile must be configured to disable the autofill services.

Rule-ID|SV-258494r929520_rule

STIG-ID|GOOG-13-710500

Vuln-ID|V-258494

GOOG-13-710800 - Android 13 devices must have the latest available Google Android 13 operating system installed.

CAT|I

Rule-ID|SV-258495r929523_rule

STIG-ID|GOOG-13-710800

Vuln-ID|V-258495

GOOG-13-710900 - Android 13 devices must be configured to disable the use of third-party keyboards (work profile only).

Rule-ID|SV-258496r929526_rule

STIG-ID|GOOG-13-710900

Vuln-ID|V-258496

GOOG-13-712300 - The Google Android 13 must allow only the administrator (EMM) to install/remove DOD root and intermediate PKI certificates (work profile) - EMM to install/remove DOD root and intermediate PKI certificates.

Detections

Analytics

AirWatch - DISA Google Android 13 BYOD v1r2

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.2 Mar 13, 2026 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.1 Jun 18, 2024 Miscellaneous Metadata updated.

Detections

Analytics

AirWatch - DISA Google Android 13 BYOD v1r2 Download File

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

AirWatch - DISA Google Android 13 BYOD v1r2