GOOG-16-002800 - Google Android 16 must be configured to enable audit logging.

800-53|AU-6(4)

CAT|II

CCI|CCI-000154

Rule-ID|SV-276748r1140036_rule

STIG-ID|GOOG-16-002800

Vuln-ID|V-276748

GOOG-16-006000 - Google Android 16 must be configured to enforce a minimum password length of six characters.

800-53|IA-5(1)(a)

CCI|CCI-004066

Rule-ID|SV-276749r1140039_rule

STIG-ID|GOOG-16-006000

Vuln-ID|V-276749

GOOG-16-006100 - Google Android 16 must be configured to not allow passwords that include more than four repeating or sequential characters - Characters

Rule-ID|SV-276750r1140042_rule

STIG-ID|GOOG-16-006100

Vuln-ID|V-276750

GOOG-16-006100 - Google Android 16 must be configured to not allow passwords that include more than four repeating or sequential characters - Numbers

GOOG-16-006300 - Google Android 16 must be configured to lock the display after 15 minutes (or less) of inactivity - or less of inactivity.

800-53|AC-11a.

CCI|CCI-000057

Rule-ID|SV-276751r1140045_rule

STIG-ID|GOOG-16-006300

Vuln-ID|V-276751

GOOG-16-006400 - Google Android 16 must be configured to not allow more than 10 consecutive failed authentication attempts.

800-53|AC-7a.

CCI|CCI-000044

Rule-ID|SV-276752r1140048_rule

STIG-ID|GOOG-16-006400

Vuln-ID|V-276752

GOOG-16-006500 - Google Android 16 must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DOD-approved commercial app repository, MDM server, mobile application store].

800-53|CM-6b.

CCI|CCI-000366

Rule-ID|SV-276753r1140051_rule

STIG-ID|GOOG-16-006500

Vuln-ID|V-276753

GOOG-16-006600 - Google Android 16 must be configured to enforce an application installation policy by specifying an application allowlist that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].

800-53|CM-7(2)

CCI|CCI-001764

Rule-ID|SV-276754r1140054_rule

STIG-ID|GOOG-16-006600

Vuln-ID|V-276754

GOOG-16-006700 - Google Android 16 allowlist must be configured to not include applications with the following characteristics:

800-53|IA-7

CCI|CCI-000803

Rule-ID|SV-276755r1140057_rule

STIG-ID|GOOG-16-006700

Vuln-ID|V-276755

GOOG-16-006750 - Google Android 16 allowlist must be configured to not include artificial intelligence (AI) applications that process device data in the cloud, including Google Gemini - AI applications that process device data in the cloud, including Google Gemini.

Rule-ID|SV-276756r1140662_rule

STIG-ID|GOOG-16-006750

Vuln-ID|V-276756

GOOG-16-006800 - Google Android 16 must be configured to not display the following (work profile) notifications when the device is locked: [selection:

800-53|AC-11(1)

CCI|CCI-000060

Rule-ID|SV-276757r1140063_rule

STIG-ID|GOOG-16-006800

Vuln-ID|V-276757

GOOG-16-007200 - Google Android 16 must be configured to disable trust agents - NOTE: This requirement is not applicable (NA) for specific biometric authentication factors included in the product's Common Criteria evaluation.

800-53|IA-2(3)

CCI|CCI-000767

Rule-ID|SV-276758r1140066_rule

STIG-ID|GOOG-16-007200

Vuln-ID|V-276758

GOOG-16-007400 - Google Android 16 must be configured to disable developer modes.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-276759r1140069_rule

STIG-ID|GOOG-16-007400

Vuln-ID|V-276759

GOOG-16-007700 - Google Android 16 must be configured to display the DOD advisory warning message at startup or each time the user unlocks the device.

800-53|AC-8a.

CAT|III

CCI|CCI-000048

Rule-ID|SV-276760r1140072_rule

STIG-ID|GOOG-16-007700

Vuln-ID|V-276760

GOOG-16-007800 - Google Android 16 must be configured to generate audit records for the following auditable events: Detected integrity violations.

800-53|AU-12a.

CCI|CCI-000169

Rule-ID|SV-276761r1140075_rule

STIG-ID|GOOG-16-007800

Vuln-ID|V-276761

GOOG-16-008400 - Google Android 16 must be configured to disable USB mass storage mode.

800-53|SC-41

CCI|CCI-002546

Rule-ID|SV-276762r1140078_rule

STIG-ID|GOOG-16-008400

Vuln-ID|V-276762

GOOG-16-008500 - Google Android 16 must be configured to not allow backup of [all applications, configuration data] to locally connected systems.

800-53|SC-4

CCI|CCI-001090

Rule-ID|SV-276763r1140081_rule

STIG-ID|GOOG-16-008500

Vuln-ID|V-276763

GOOG-16-008600 - Google Android 16 must be configured to not allow backup of [all applications, configuration data] to remote systems.

Rule-ID|SV-276764r1140084_rule

STIG-ID|GOOG-16-008600

Vuln-ID|V-276764

GOOG-16-008700 - Google Android 16 must be configured to enable authentication of personal hotspot connections to the device using a preshared key.

800-53|AC-17(1)

800-53|AC-18(1)

CCI|CCI-001443

CCI|CCI-002314

Rule-ID|SV-276765r1140087_rule

STIG-ID|GOOG-16-008700

Vuln-ID|V-276765

GOOG-16-009000 - Google Android 16 must be configured to disable multiuser modes.

800-53|AC-2a.

CCI|CCI-002110

Rule-ID|SV-276766r1140090_rule

STIG-ID|GOOG-16-009000

Vuln-ID|V-276766

GOOG-16-009400 - Google Android 16 must be configured to disable Bluetooth or configured via User Based Enforcement (UBE) to allow Bluetooth for only Headset Profile (HSP), Hands-Free Profile (HFP), and Serial Port Profile (SPP) - SPP.

800-53|CM-7(1)(b)

CCI|CCI-001761

Rule-ID|SV-276767r1140665_rule

STIG-ID|GOOG-16-009400

Vuln-ID|V-276767

GOOG-16-009500 - Google Android 16 must be configured to disable ad hoc wireless client-to-client connection capability.

800-53|SC-40

CCI|CCI-002536

Rule-ID|SV-276768r1140096_rule

STIG-ID|GOOG-16-009500

Vuln-ID|V-276768

GOOG-16-009800 - Google Android 16 users must complete required training.

Rule-ID|SV-276769r1140099_rule

STIG-ID|GOOG-16-009800

Vuln-ID|V-276769

GOOG-16-009900 - Google Android 16 must be configured to disable Wi-Fi Sharing.

Rule-ID|SV-276770r1140102_rule

STIG-ID|GOOG-16-009900

Vuln-ID|V-276770

GOOG-16-009950 - Google Android 16 must be configured to enforce a password for Wi-Fi and Bluetooth hotspot if approved for use by the authorizing official (AO). If not approved for use, Wi-Fi and Bluetooth hotspot must be disabled - AO. If not approved for use, Wi-Fi and Bluetooth hotspot must be disabled.

Rule-ID|SV-276771r1140105_rule

STIG-ID|GOOG-16-009950

Vuln-ID|V-276771

GOOG-16-010000 - Google Android 16 must have the DOD root and intermediate PKI certificates installed.

Rule-ID|SV-276772r1140108_rule

STIG-ID|GOOG-16-010000

Vuln-ID|V-276772

GOOG-16-010200 - The Google Android 16 work profile must be configured to enforce the system application disable list.

Rule-ID|SV-276773r1140111_rule

STIG-ID|GOOG-16-010200

Vuln-ID|V-276773

GOOG-16-010400 - The Google Android 16 work profile must be configured to disable automatic completion of workspace internet browser text input.

Rule-ID|SV-276774r1140114_rule

STIG-ID|GOOG-16-010400

Vuln-ID|V-276774

GOOG-16-010500 - The Google Android device must be configured to disable Wi-Fi Aware for Work Profile apps.

CAT|I

Rule-ID|SV-276775r1140673_rule

STIG-ID|GOOG-16-010500

Vuln-ID|V-276775

GOOG-16-010800 - Android 16 devices must have the latest available Google Android 16 operating system installed.

Rule-ID|SV-276777r1140123_rule

STIG-ID|GOOG-16-010800

Vuln-ID|V-276777

GOOG-16-010900 - Android 16 devices must be configured to disable the use of third-party keyboards.

Rule-ID|SV-276778r1140126_rule

STIG-ID|GOOG-16-010900

Vuln-ID|V-276778

GOOG-16-011000 - Android 16 devices must be configured to enable Common Criteria (CC) Mode - CC Mode.

Rule-ID|SV-276779r1140129_rule

STIG-ID|GOOG-16-011000

Vuln-ID|V-276779

GOOG-16-012200 - Google Android 16 must be configured to disable all data signaling over [assignment: list of externally accessible hardware ports (for example, USB)] - for example, USB].

800-53|AC-6(10)

CCI|CCI-002235

Rule-ID|SV-276780r1140132_rule

STIG-ID|GOOG-16-012200

Vuln-ID|V-276780

GOOG-16-012300 - Google Android 16 must allow only the administrator (EMM) to install/remove DOD root and intermediate PKI certificates - EMM to install/remove DOD root and intermediate PKI certificates.

800-53|CM-6(1)

CCI|CCI-000370

Rule-ID|SV-276781r1140135_rule

STIG-ID|GOOG-16-012300

Vuln-ID|V-276781

GOOG-16-012400 - Google Android 16 must allow only the administrator (MDM) to perform the following management function: Disable Phone Hub - MDM to perform the following management function: Disable Phone Hub.

Rule-ID|SV-276782r1140138_rule

STIG-ID|GOOG-16-012400

Vuln-ID|V-276782

GOOG-16-012500 - Google Android 16 must be configured to disable 'Private Space' use - Private Space use.

Rule-ID|SV-276783r1140141_rule

STIG-ID|GOOG-16-012500

Vuln-ID|V-276783

GOOG-16-013000 - Google Android 16 must disable the user's ability to wipe the device.

Rule-ID|SV-276784r1183777_rule

STIG-ID|GOOG-16-013000

Vuln-ID|V-276784

GOOG-16-013200 - Google Android 16 must disable wireless printing.

Rule-ID|SV-276786r1140150_rule

STIG-ID|GOOG-16-013200

Vuln-ID|V-276786

GOOG-16-013300 - Google Android 16 must disable screen capture.

Rule-ID|SV-276787r1140153_rule

STIG-ID|GOOG-16-013300

Vuln-ID|V-276787

GOOG-16-013400 - Google Android 16 devices must have a Mobile Threat Detection (MTD) app installed.

Rule-ID|SV-276788r1140156_rule

STIG-ID|GOOG-16-013400

Detections

Analytics

AirWatch - DISA Google Android 16 COBO STIG v1r3

Audit Details

File Details

Audit Changelog

No revisions found