1.13 Ensure 'Lock SIM card' is set to 'Enabled'

Information

Lock SIM card.
The recommended state for this setting is: Enabled.

Rationale:

If your device uses a SIM card(s), enable SIM card lock. A SIM card PIN locks the SIM and prevents anyone from removing the SIM card from your device and use it on any other device without knowing the PIN. Also, you might choose to store your contacts and messages on the SIM card and thus it is highly recommended that you safeguard this valuable personal data by setting a custom PIN on the SIM card(s).
Note: Only phones that are not locked by the service provider can lock the SIM card.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Follow the below steps to enable Lock SIM card:

Call up your SIM card provider and get the default SIM PIN.
Tap the Settings Gear Icon.
Tap Security.
Tap SIM card lock.
Toggle Lock SIM card to the on position.
Enter the default PIN provided by your SIM provider.
Press OK.
The Lock SIM card option will then be enabled.
Tap on Change SIM PIN.
Again provide the default PIN provided (Old PIN) by your SIM card provider.
Type your new custom PIN.
Re-type your new custom PIN.
Press OK.
Your custom SIM PIN is then set.
Repeat the process for your 2nd SIM, if applicable.

Impact:

You would need to remember your SIM card PIN. If you forget your SIM card PIN, you need your SIM card provider support for unlocking the SIM card.

Default Value:

By default, Lock SIM card is disabled. Also, the SIM card has a default PIN set by the provider which is usually universally known.

See Also

https://workbench.cisecurity.org/files/2466