GOOG-16-002800 - Google Android 16 must be configured to enable audit logging.

CAT|II

CCI|CCI-000154

Rule-ID|SV-276850r1140342_rule

STIG-ID|GOOG-16-002800

Vuln-ID|V-276850

GOOG-16-006000 - Google Android 16 must be configured to enforce a minimum password length of six characters.

CCI|CCI-004066

Rule-ID|SV-276851r1140345_rule

STIG-ID|GOOG-16-006000

Vuln-ID|V-276851

GOOG-16-006100 - Google Android 16 must be configured to not allow passwords that include more than four repeating or sequential characters - Characters

Rule-ID|SV-276852r1140348_rule

STIG-ID|GOOG-16-006100

Vuln-ID|V-276852

GOOG-16-006100 - Google Android 16 must be configured to not allow passwords that include more than four repeating or sequential characters - Numbers

GOOG-16-006300 - Google Android 16 must be configured to lock the display after 15 minutes (or less) of inactivity - or less of inactivity.

CCI|CCI-000057

Rule-ID|SV-276853r1140351_rule

STIG-ID|GOOG-16-006300

Vuln-ID|V-276853

GOOG-16-006400 - Google Android 16 must be configured to not allow more than 10 consecutive failed authentication attempts.

CCI|CCI-000044

Rule-ID|SV-276854r1140354_rule

STIG-ID|GOOG-16-006400

Vuln-ID|V-276854

GOOG-16-006500 - Google Android 16 must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DOD-approved commercial app repository, MDM server, mobile application store].

CCI|CCI-000366

Rule-ID|SV-276855r1140357_rule

STIG-ID|GOOG-16-006500

Vuln-ID|V-276855

GOOG-16-006600 - Google Android 16 must be configured to enforce an application installation policy by specifying an application allowlist that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].

CCI|CCI-001764

Rule-ID|SV-276856r1140360_rule

STIG-ID|GOOG-16-006600

Vuln-ID|V-276856

GOOG-16-006700 - Google Android 16 allowlist must be configured to not include applications with the following characteristics:

CCI|CCI-000803

Rule-ID|SV-276857r1140363_rule

STIG-ID|GOOG-16-006700

Vuln-ID|V-276857

GOOG-16-006750 - Google Android 16 allowlist must be configured to not include artificial intelligence (AI) applications that process device data in the cloud, including Google Gemini - AI applications that process device data in the cloud, including Google Gemini.

Rule-ID|SV-276858r1140366_rule

STIG-ID|GOOG-16-006750

Vuln-ID|V-276858

GOOG-16-006800 - Google Android 16 must be configured to not display the following (work profile) notifications when the device is locked: [selection:

CCI|CCI-000060

Rule-ID|SV-276859r1140369_rule

STIG-ID|GOOG-16-006800

Vuln-ID|V-276859

GOOG-16-007200 - Google Android 16 must be configured to disable trust agents - NOTE: This requirement is not applicable (NA) for specific biometric authentication factors included in the product's Common Criteria evaluation.

CCI|CCI-000767

Rule-ID|SV-276860r1140372_rule

STIG-ID|GOOG-16-007200

Vuln-ID|V-276860

GOOG-16-007400 - Google Android 16 must be configured to disable developer modes.

CCI|CCI-000381

Rule-ID|SV-276861r1140375_rule

STIG-ID|GOOG-16-007400

Vuln-ID|V-276861

GOOG-16-007700 - Google Android 16 must be configured to display the DOD advisory warning message at startup or each time the user unlocks the device.

CAT|III

CCI|CCI-000048

Rule-ID|SV-276862r1140378_rule

STIG-ID|GOOG-16-007700

Vuln-ID|V-276862

GOOG-16-007800 - Google Android 16 must be configured to generate audit records for the following auditable events: Detected integrity violations.

CCI|CCI-000169

Rule-ID|SV-276863r1140381_rule

STIG-ID|GOOG-16-007800

Vuln-ID|V-276863

GOOG-16-008400 - Google Android 16 must be configured to disable USB mass storage mode.

CCI|CCI-002546

Rule-ID|SV-276864r1140384_rule

STIG-ID|GOOG-16-008400

Vuln-ID|V-276864

GOOG-16-008500 - Google Android 16 must be configured to not allow backup of [all applications, configuration data] to locally connected systems.

CCI|CCI-001090

Rule-ID|SV-276865r1140387_rule

STIG-ID|GOOG-16-008500

Vuln-ID|V-276865

GOOG-16-008600 - Google Android 16 must be configured to not allow backup of [all applications, configuration data] to remote systems.

Rule-ID|SV-276866r1140390_rule

STIG-ID|GOOG-16-008600

Vuln-ID|V-276866

GOOG-16-008700 - Google Android 16 must be configured to enable authentication of personal hotspot connections to the device using a preshared key.

CCI|CCI-001443

CCI|CCI-002314

Rule-ID|SV-276867r1140393_rule

STIG-ID|GOOG-16-008700

Vuln-ID|V-276867

GOOG-16-008900 - Google Android 16 must be configured to disable exceptions to the access control policy that prevent [selection: application processes, groups of application processes] from accessing [selection: all, private] data stored by other [selection: application processes, groups of application processes].

CCI|CCI-002233

CCI|CCI-002530

Rule-ID|SV-276868r1140396_rule

STIG-ID|GOOG-16-008900

Vuln-ID|V-276868

GOOG-16-009000 - Google Android 16 must be configured to disable multiuser modes.

CCI|CCI-002110

Rule-ID|SV-276869r1140399_rule

STIG-ID|GOOG-16-009000

Vuln-ID|V-276869

GOOG-16-009400 - Google Android 16 must be configured to disable Bluetooth or configured via User Based Enforcement (UBE) to allow Bluetooth for only Headset Profile (HSP), Hands-Free Profile (HFP), and Serial Port Profile (SPP) - SPP.

CCI|CCI-001761

Rule-ID|SV-276870r1140667_rule

STIG-ID|GOOG-16-009400

Vuln-ID|V-276870

GOOG-16-009500 - Google Android 16 must be configured to disable ad hoc wireless client-to-client connection capability.

CCI|CCI-002536

Rule-ID|SV-276871r1140405_rule

STIG-ID|GOOG-16-009500

Vuln-ID|V-276871

GOOG-16-009800 - Google Android 16 users must complete required training.

Rule-ID|SV-276872r1140408_rule

STIG-ID|GOOG-16-009800

Vuln-ID|V-276872

GOOG-16-009900 - Google Android 16 must be configured to disable Wi-Fi Sharing.

Rule-ID|SV-276873r1140411_rule

STIG-ID|GOOG-16-009900

Vuln-ID|V-276873

GOOG-16-009950 - Google Android 16 must be configured to enforce a password for Wi-Fi and Bluetooth hotspot if approved for use by the authorizing official (AO). If not approved for use, Wi-Fi and Bluetooth hotspot must be disabled - AO. If not approved for use, Wi-Fi and Bluetooth hotspot must be disabled.

Rule-ID|SV-276874r1140414_rule

STIG-ID|GOOG-16-009950

Vuln-ID|V-276874

GOOG-16-010000 - Google Android 16 must have the DOD root and intermediate PKI certificates installed.

Rule-ID|SV-276875r1140417_rule

STIG-ID|GOOG-16-010000

Vuln-ID|V-276875

GOOG-16-010100 - The Google Android 16 work profile must be configured to prevent users from adding personal email accounts to the work email app.

Rule-ID|SV-276876r1140420_rule

STIG-ID|GOOG-16-010100

Vuln-ID|V-276876

GOOG-16-010200 - The Google Android 16 work profile must be configured to enforce the system application disable list.

Rule-ID|SV-276877r1140423_rule

STIG-ID|GOOG-16-010200

Vuln-ID|V-276877

GOOG-16-010300 - Google Android 16 must be provisioned as a fully managed device and configured to create a work profile.

Rule-ID|SV-276878r1140426_rule

STIG-ID|GOOG-16-010300

Vuln-ID|V-276878

GOOG-16-010400 - The Google Android 16 work profile must be configured to disable automatic completion of workspace internet browser text input.

Rule-ID|SV-276879r1140429_rule

STIG-ID|GOOG-16-010400

Vuln-ID|V-276879

GOOG-16-010500 - The Google Android device must be configured to disable Wi-Fi Aware for Work Profile apps.

Rule-ID|SV-276880r1140679_rule

STIG-ID|GOOG-16-010500

Vuln-ID|V-276880

GOOG-16-010600 - Google Android 16 must implement the management setting: disable the Bluetooth radio.

Rule-ID|SV-276881r1140676_rule

STIG-ID|GOOG-16-010600

Vuln-ID|V-276881

GOOG-16-010800 - Android 16 devices must have the latest available Google Android 16 operating system installed.

CAT|I

Rule-ID|SV-276882r1140438_rule

STIG-ID|GOOG-16-010800

Vuln-ID|V-276882

GOOG-16-010900 - Android 16 devices must be configured to disable the use of third-party keyboards.

Rule-ID|SV-276883r1140441_rule

STIG-ID|GOOG-16-010900

Vuln-ID|V-276883

GOOG-16-011000 - Android 16 devices must be configured to enable Common Criteria (CC) Mode - CC Mode.

Rule-ID|SV-276884r1140444_rule

STIG-ID|GOOG-16-011000

Vuln-ID|V-276884

GOOG-16-012200 - Google Android 16 must be configured to disable all data signaling over [assignment: list of externally accessible hardware ports (for example, USB)] - for example, USB].

CCI|CCI-002235

Rule-ID|SV-276885r1140447_rule

STIG-ID|GOOG-16-012200

Vuln-ID|V-276885

GOOG-16-012300 - Google Android 16 must allow only the administrator (EMM) to install/remove DOD root and intermediate PKI certificates - EMM to install/remove DOD root and intermediate PKI certificates.

CCI|CCI-000370

Rule-ID|SV-276886r1140450_rule

STIG-ID|GOOG-16-012300

Vuln-ID|V-276886

GOOG-16-012400 - Google Android 16 must allow only the administrator (MDM) to perform the following management function: Disable Phone Hub - MDM to perform the following management function: Disable Phone Hub.

Rule-ID|SV-276887r1140453_rule

STIG-ID|GOOG-16-012400

Vuln-ID|V-276887

GOOG-16-012500 - Google Android 16 must be configured to disable 'Private Space' use - Private Space use.

Rule-ID|SV-276888r1140456_rule

STIG-ID|GOOG-16-012500

Vuln-ID|V-276888

GOOG-16-013000 - Google Android 16 must disable the user's ability to wipe the device.

Rule-ID|SV-276889r1188340_rule

STIG-ID|GOOG-16-013000

Vuln-ID|V-276889

GOOG-16-013100 - Google Android 16 must disable the use of assistants (including Google Assistant) unless required to meet Section 508 compliance requirements.

Rule-ID|SV-276890r1140462_rule

STIG-ID|GOOG-16-013100

Vuln-ID|V-276890

GOOG-16-013200 - Google Android 16 must disable wireless printing.

Rule-ID|SV-276891r1140465_rule

STIG-ID|GOOG-16-013200

Vuln-ID|V-276891

GOOG-16-013300 - Google Android 16 must disable screen capture.

Rule-ID|SV-276892r1140468_rule

STIG-ID|GOOG-16-013300

Vuln-ID|V-276892

GOOG-16-013400 - Google Android 16 devices must have a Mobile Threat Detection (MTD) app installed.

Detections

Analytics

AirWatch - DISA Google Android 16 COPE STIG v1r2

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

No revisions found