| 1.1 Ensure device firmware is up to date | AirWatch - CIS Google Android 7 v1.0.0 L1 | MDM | |
| 1.1.15 - AirWatch - Turn off Location Services | AirWatch - CIS Apple iOS 9 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.6 Ensure 'Lock Screen Message' is configured | AirWatch - CIS Google Android 7 v1.0.0 L1 | MDM | |
| 1.16 Ensure 'Speak passwords' is set to Disabled | AirWatch - CIS Google Android 7 v1.0.0 L1 | MDM | CONFIGURATION MANAGEMENT |
| 1.20 Ensure 'Scan device for security threats' is set to Enabled | AirWatch - CIS Google Android 7 v1.0.0 L1 | MDM | |
| 1.24 Ensure 'Wi-Fi assistant' is set to Disabled | AirWatch - CIS Google Android 7 v1.0.0 L1 | MDM | CONFIGURATION MANAGEMENT |
| 1.25 Keep device Apps up to date | AirWatch - CIS Google Android 7 v1.0.0 L1 | MDM | |
| 1.26 Ensure 'Add users when device is locked' is set to Disabled | AirWatch - CIS Google Android 7 v1.0.0 L1 | MDM | CONFIGURATION MANAGEMENT |
| 1.28 Review app permissions periodically | AirWatch - CIS Google Android 7 v1.0.0 L1 | MDM | |
| 1.29 Ensure Wi-Fi hotspot security is set to WPA2-PSK | AirWatch - CIS Google Android 7 v1.0.0 L1 | MDM | |
| 2.1 Ensure 'Notifications on the lock screen' is set to Disabled | AirWatch - CIS Google Android 7 v1.0.0 L1 | MDM | CONFIGURATION MANAGEMENT |
| 2.4 Ensure 'Signed-out search activity' is set to Disabled | AirWatch - CIS Google Android 7 v1.0.0 L1 | MDM | CONFIGURATION MANAGEMENT |
| 2.6 Ensure 'Device Information' is set to Disabled | AirWatch - CIS Google Android 7 v1.0.0 L1 | MDM | CONFIGURATION MANAGEMENT |
| 2.7 Ensure 'Voice & Audio Activity' is set to Disabled | AirWatch - CIS Google Android 7 v1.0.0 L1 | MDM | CONFIGURATION MANAGEMENT |
| 2.8 Ensure 'YouTube Search History' is set to Disabled | AirWatch - CIS Google Android 7 v1.0.0 L1 | MDM | CONFIGURATION MANAGEMENT |
| 2.9 Ensure 'YouTube Watch History' is set to Disabled | AirWatch - CIS Google Android 7 v1.0.0 L1 | MDM | CONFIGURATION MANAGEMENT |
| 2.10 Ensure 'Google Location History' is set to Disabled | AirWatch - CIS Google Android 7 v1.0.0 L1 | MDM | CONFIGURATION MANAGEMENT |
| 18.10.34.1 (L1) Ensure 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always' | CIS Microsoft Windows 10 EMS Gateway v3.0.0 L1 | Windows | CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
| AIOS-11-080203 - Apple iOS must implement the management setting: force Apple Watch wrist detection. | AirWatch - DISA Apple iOS 10 v1r3 | MDM | CONFIGURATION MANAGEMENT |
| AIOS-12-004300 - Apple iOS must not allow backup to remote systems (iCloud Keychain). | AirWatch - DISA Apple iOS 12 v2r1 | MDM | CONFIGURATION MANAGEMENT |
| DISA_STIG_Apple_macOS_11_v1r5.audit from DISA Apple macOS 11 (Big Sur) v1r5 STIG | DISA STIG Apple macOS 11 v1r5 | Unix | |
| DISA_STIG_Apple_macOS_11_v1r8.audit from DISA Apple macOS 11 (Big Sur) v1r8 STIG | DISA STIG Apple macOS 11 v1r8 | Unix | |
| GEN002860 - Audit logs must be rotated daily. | DISA STIG Solaris 10 SPARC v2r4 | Unix | CONFIGURATION MANAGEMENT |
| GOOG-11-003700 - Google Android 11 must be configured to not allow backup of [all applications, configuration data] to locally connected systems. | MobileIron - DISA Google Android 11 COPE v2r1 | MDM | ACCESS CONTROL |
| GOOG-12-009500 - Google Android 12 must be configured to disable ad hoc wireless client-to-client connection capability. | MobileIron - DISA Google Android 12 COPE v1r2 | MDM | SYSTEM AND COMMUNICATIONS PROTECTION |
| GOOG-13-006400 - Google Android 13 must be configured to not allow more than 10 consecutive failed authentication attempts. | MobileIron - DISA Google Android 13 COPE STIG v2r3 | MDM | ACCESS CONTROL |
| GOOG-14-006400 - Google Android 14 must be configured to not allow more than 10 consecutive failed authentication attempts. | MobileIron - DISA Google Android 14 COPE STIG v2r5 | MDM | ACCESS CONTROL |
| GOOG-16-006000 - Google Android 16 must be configured to enforce a minimum password length of six characters. | MobileIron - DISA Google Android 16 COPE STIG v1r1 | MDM | IDENTIFICATION AND AUTHENTICATION |
| GOOG-16-006100 - Google Android 16 must be configured to not allow passwords that include more than four repeating or sequential characters - Complex Characters | MobileIron - DISA Google Android 16 COPE STIG v1r1 | MDM | IDENTIFICATION AND AUTHENTICATION |
| GOOG-16-006400 - Google Android 16 must be configured to not allow more than 10 consecutive failed authentication attempts. | MobileIron - DISA Google Android 16 COPE STIG v1r1 | MDM | ACCESS CONTROL |
| GOOG-16-006700 - Google Android 16 allowlist must be configured to not include applications with the following characteristics: | MobileIron - DISA Google Android 16 COPE STIG v1r1 | MDM | IDENTIFICATION AND AUTHENTICATION |
| GOOG-16-006750 - Google Android 16 allowlist must be configured to not include artificial intelligence (AI) applications that process device data in the cloud, including Google Gemini - AI applications that process device data in the cloud, including Google Gemini. | MobileIron - DISA Google Android 16 COPE STIG v1r1 | MDM | IDENTIFICATION AND AUTHENTICATION |
| GOOG-16-010200 - The Google Android 16 work profile must be configured to enforce the system application disable list. | MobileIron - DISA Google Android 16 COPE STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-16-013300 - Google Android 16 must disable screen capture. | MobileIron - DISA Google Android 16 COPE STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-17-005000 - Google Android 17 must be configured to enforce a minimum password length of six characters. | MobileIron - DISA Google Android 17 COPE STIG v1r1 | MDM | IDENTIFICATION AND AUTHENTICATION |
| GOOG-17-005100 - Google Android 17 must be configured to not allow passwords that include more than four repeating or sequential characters - Alphanumeric | MobileIron - DISA Google Android 17 COPE STIG v1r1 | MDM | IDENTIFICATION AND AUTHENTICATION |
| GOOG-17-005300 - Google Android 17 must be configured to not allow more than 10 consecutive failed authentication attempts. | MobileIron - DISA Google Android 17 COPE STIG v1r1 | MDM | ACCESS CONTROL |
| GOOG-17-007300 - Google Android 17 must be configured to enable authentication of personal hotspot connections to the device using a preshared key. | MobileIron - DISA Google Android 17 COPE STIG v1r1 | MDM | ACCESS CONTROL |
| GOOG-17-008000 - Google Android 17 must be configured to disable Bluetooth or configured via User-Based Enforcement (UBE) to allow Bluetooth for only Headset Profile (HSP), Hands-Free Profile (HFP), and Serial Port Profile (SPP). | MobileIron - DISA Google Android 17 COPE STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-17-008400 - Google Android 17 must be configured to disable Wi-Fi sharing. | MobileIron - DISA Google Android 17 COPE STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-17-009800 - Google Android 17 must allow only the administrator (EMM) to install/remove DoW root and intermediate PKI certificates. | MobileIron - DISA Google Android 17 COPE STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
| HONW-13-009400 - Honeywell Android 13 must be configured to disable Bluetooth or configured via User-Based Enforcement (UBE) to allow Bluetooth for only Headset Profile (HSP), Hands-Free Profile (HFP), and Serial Port Profile (SPP). | MobileIron - DISA Honeywell Android 13 COPE STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
| HONW-13-010000 - Honeywell Android 13 must have the DOD root and intermediate PKI certificates installed. | MobileIron - DISA Honeywell Android 13 COPE STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
| HONW-13-010200 - The Honeywell Android 13 work profile must be configured to enforce the system application disable list. | MobileIron - DISA Honeywell Android 13 COPE STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
| HONW-13-010400 - The Honeywell Android 13 work profile must be configured to disable automatic completion of workspace internet browser text input. | MobileIron - DISA Honeywell Android 13 COPE STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
| HONW-13-010800 - Android 13 devices must have the latest available Honeywell Android 13 operating system installed. | MobileIron - DISA Honeywell Android 13 COPE STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
| HONW-13-012300 - Honeywell Android 13 must allow only the administrator (EMM) to install/remove DOD root and intermediate PKI certificates. | MobileIron - DISA Honeywell Android 13 COPE STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
| MSFT-11-001400 - Microsoft Android 11 must be configured to disable Bluetooth or configured via User Based Enforcement (UBE) to allow Bluetooth for only Headset Profile (HSP), HandsFree Profile (HFP), and Serial Port Profile (SPP) - Serial Port Profile capable devices. | MobileIron - DISA Microsoft Android 11 COPE v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-13-006400 - Zebra Android 13 must be configured to not allow more than 10 consecutive failed authentication attempts. | MobileIron - DISA Zebra Android 13 COPE STIG v1r2 | MDM | ACCESS CONTROL |
| ZEBR-14-006400 - Zebra Android 14 must be configured to not allow more than 10 consecutive failed authentication attempts. | MobileIron - DISA Zebra Android 14 COPE STIG v1r2 | MDM | ACCESS CONTROL |
