Item Search

NameAudit NamePluginCategory
GOOG-12-006000 - Google Android 12 must be configured to enforce a minimum password length of six characters.MobileIron - DISA Google Android 12 COBO v1r2MDM

IDENTIFICATION AND AUTHENTICATION

GOOG-12-006100 - Google Android 12 must be configured to not allow passwords that include more than two repeating or sequential characters - AlphanumericMobileIron - DISA Google Android 12 COBO v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-006100 - Google Android 12 must be configured to not allow passwords that include more than two repeating or sequential characters - Complex CharactersMobileIron - DISA Google Android 12 COPE v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-006200 - Google Android 12 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.MobileIron - DISA Google Android 12 COPE v1r2MDM

ACCESS CONTROL

GOOG-12-006300 - Google Android 12 must be configured to lock the display after 15 minutes (or less) of inactivity.AirWatch - DISA Google Android 12 COPE v1r2MDM

ACCESS CONTROL

GOOG-12-006500 - Google Android 12 must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DoD-approved commercial app repository, MDM server, mobile application store].MobileIron - DISA Google Android 12 COBO v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-006600 - Google Android 12 must be configured to enforce an application installation policy by specifying an application allowlist that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].MobileIron - DISA Google Android 12 COBO v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-006600 - Google Android 12 must be configured to enforce an application installation policy by specifying an application allowlist that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].MobileIron - DISA Google Android 12 COPE v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-006700 - Google Android 12 allowlist must be configured to not include applications with the following characteristics: 1. Back up mobile device (MD) data to non-DoD cloud servers (including user and application access to cloud backup services);2. Transmit MD diagnostic data to non-DoD servers;3. Voice assistant application if available when MD is locked;4. Voice dialing application if available when MD is locked;5. Allows synchronization of data or applications between devices associated with user; and6. Allows unencrypted (or encrypted but not FIPS 140-2 validated) data sharing with other MDs or printers.MobileIron - DISA Google Android 12 COPE v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-007200 - Google Android 12 must be configured to disable trust agents.MobileIron - DISA Google Android 12 COBO v1r2MDM

IDENTIFICATION AND AUTHENTICATION

GOOG-12-008400 - Google Android 12 must be configured to disable USB mass storage mode.MobileIron - DISA Google Android 12 COPE v1r2MDM

SYSTEM AND COMMUNICATIONS PROTECTION

GOOG-12-009400 - Google Android 12 must be configured to disable Bluetooth or configured via User Based Enforcement (UBE) to allow Bluetooth for only Headset Profile (HSP), Hands-Free Profile (HFP), and Serial Port Profile (SPP).MobileIron - DISA Google Android 12 COPE v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-009500 - Google Android 12 must be configured to disable ad hoc wireless client-to-client connection capability.AirWatch - DISA Google Android 12 COPE v1r2MDM

SYSTEM AND COMMUNICATIONS PROTECTION

GOOG-12-009800 - Google Android 12 users must complete required training.MobileIron - DISA Google Android 12 COPE v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-009900 - Google Android 12 must be configured to enforce that Wi-Fi Sharing is disabled.AirWatch - DISA Google Android 12 COPE v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-010100 - The Google Android 12 Work Profile must be configured to prevent users from adding personal email accounts to the work email app.MobileIron - DISA Google Android 12 COPE v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-010200 - Google Android 12 work profile must be configured to enforce the system application disable list.MobileIron - DISA Google Android 12 COBO v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-010200 - Google Android 12 work profile must be configured to enforce the system application disable list.MobileIron - DISA Google Android 12 COPE v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-010400 - Google Android 12 work profile must be configured to disable automatic completion of work space Internet browser text input.MobileIron - DISA Google Android 12 COBO v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-010500 - Google Android 12 Work Profile must be configured to disable the autofill services.MobileIron - DISA Google Android 12 COPE v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-011000 - Android 12 devices must be configured to enable Common Criteria Mode (CC Mode).AirWatch - DISA Google Android 12 COPE v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-012100 - Google Android 12 must allow only the administrator (EMM) to install/remove DoD root and intermediate PKI certificates.MobileIron - DISA Google Android 12 COBO v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-999999 - All Google Android 12 installations must be removed.MobileIron - DISA Google Android 12 COBO v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-14-706300 - Google Android 14 must be configured to lock the display after 15 minutes (or less) of inactivity - or less of inactivity.MobileIron - DISA Google Android 14 BYOAD v1r2MDM

ACCESS CONTROL

GOOG-14-706600 - Google Android 14 must be configured to enforce an application installation policy by specifying an application allowlist that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].AirWatch - DISA Google Android 14 BYOAD v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-14-706600 - Google Android 14 must be configured to enforce an application installation policy by specifying an application allowlist that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].MobileIron - DISA Google Android 14 BYOAD v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-14-709800 - Google Android 14 users must complete required training.MobileIron - DISA Google Android 14 BYOAD v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-14-710200 - The Google Android 14 work profile must be configured to enforce the system application disable list (work profile only) - work profile only.MobileIron - DISA Google Android 14 BYOAD v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-14-710500 - The Google Android 14 work profile must be configured to disable the autofill services.MobileIron - DISA Google Android 14 BYOAD v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-14-710800 - Android 14 devices must have the latest available Google Android 14 operating system installed.AirWatch - DISA Google Android 14 BYOAD v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-14-710800 - Android 14 devices must have the latest available Google Android 14 operating system installed.MobileIron - DISA Google Android 14 BYOAD v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-14-712300 - The Google Android 14 must allow only the administrator (EMM) to install/remove DOD root and intermediate PKI certificates (work profile) - EMM to install/remove DOD root and intermediate PKI certificates.MobileIron - DISA Google Android 14 BYOAD v1r2MDM

CONFIGURATION MANAGEMENT

MSFT-11-000100 - Microsoft Android 11 must be configured to enforce a minimum password length of six characters.AirWatch - DISA Microsoft Android 11 COBO v1r2MDM

IDENTIFICATION AND AUTHENTICATION

MSFT-11-000200 - Microsoft Android 11 must be configured to not allow passwords that include more than two repeating or sequential characters - CharactersAirWatch - DISA Microsoft Android 11 COPE v1r2MDM

CONFIGURATION MANAGEMENT

MSFT-11-000300 - Microsoft Android 11 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.AirWatch - DISA Microsoft Android 11 COPE v1r2MDM

ACCESS CONTROL

MSFT-11-000400 - Microsoft Android 11 must be configured to lock the display after 15 minutes (or less) of inactivity - or less of inactivity.MobileIron - DISA Microsoft Android 11 COBO v1r2MDM

ACCESS CONTROL

MSFT-11-000400 - Microsoft Android 11 must be configured to lock the display after 15 minutes (or less) of inactivity - or less of inactivity.AirWatch - DISA Microsoft Android 11 COPE v1r2MDM

ACCESS CONTROL

MSFT-11-000500 - Microsoft Android 11 must be configured to not allow more than 10 consecutive failed authentication attempts.AirWatch - DISA Microsoft Android 11 COBO v1r2MDM

ACCESS CONTROL

MSFT-11-000800 - Microsoft Android 11 must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DOD-approved commercial app repository, EMM server, mobile application store].AirWatch - DISA Microsoft Android 11 COBO v1r2MDM

CONFIGURATION MANAGEMENT

MSFT-11-001100 - Microsoft Android 11 allow list must be configured to not include applications with the following characteristics:AirWatch - DISA Microsoft Android 11 COBO v1r2MDM

CONFIGURATION MANAGEMENT

MSFT-11-001600 - Microsoft Android 11 must be configured to not display the following (work profile) notifications when the device is locked:AirWatch - DISA Microsoft Android 11 COBO v1r2MDM

ACCESS CONTROL

MSFT-11-001600 - Microsoft Android 11 must be configured to not display the following (work profile) notifications when the device is locked: [selection:- Email notifications - Calendar appointments - Contact associated with phone call notification - Text message notification- Other application-based notifications- All notifications] - work profile notifications when the device is locked:AirWatch - DISA Microsoft Android 11 COPE v1r2MDM

ACCESS CONTROL

MSFT-11-002000 - Microsoft Android 11 must be configured to enable encryption for data at rest on removable storage media or alternately, the use of removable storage media must be disabled.AirWatch - DISA Microsoft Android 11 COBO v1r2MDM

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

MSFT-11-003400 - Microsoft Android 11 must be configured to display the DOD advisory warning message at start-up or each time the user unlocks the device.AirWatch - DISA Microsoft Android 11 COBO v1r2MDM

ACCESS CONTROL

MSFT-11-005200 - The mobile operating system must allow only the Administrator (MDM) to perform the following management function: Enable/disable location services.AirWatch - DISA Microsoft Android 11 COBO v1r2MDM

ACCESS CONTROL

MSFT-11-008700 - Microsoft Android 11 users must complete required training.MobileIron - DISA Microsoft Android 11 COBO v1r2MDM

CONFIGURATION MANAGEMENT

MSFT-11-009200 - The Microsoft Android 11 Work Profile must be configured to prevent users from adding personal email accounts to the work email app.MobileIron - DISA Microsoft Android 11 COBO v1r2MDM

CONFIGURATION MANAGEMENT

MSFT-11-009400 - Microsoft Android 11 Work Profile must be configured to enforce the system application disable list.MobileIron - DISA Microsoft Android 11 COBO v1r2MDM

CONFIGURATION MANAGEMENT

MSFT-11-011000 - Microsoft Android 11 devices must be configured to disable the use of third-party keyboards.AirWatch - DISA Microsoft Android 11 COBO v1r2MDM

CONFIGURATION MANAGEMENT

MSFT-11-011100 - Microsoft Android 11 devices must be configured to enable Common Criteria Mode (CC Mode).AirWatch - DISA Microsoft Android 11 COBO v1r2MDM

CONFIGURATION MANAGEMENT