GOOG-16-010900 - Android 16 devices must be configured to disable the use of third-party keyboards.

Information

Many third-party keyboard applications are known to contain malware.

SFR ID: FMT_SMF.1.1 #47

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Configure the Google Android 16 device to disallow the use of third-party keyboards.

On the EMM console:

COBO and COPE:

1. Open 'Input methods'.
2. Tap 'Set input methods'.
3. Select only the approved keyboard.

Admins can also configure application allowlists for Google Play that do not have any third-party keyboards for user installation.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Android_16_Y25M08_STIG.zip