Detections
Analytics
800-53|AC-7(2)
Title
PURGE / WIPE MOBILE DEVICEDescription
The information system purges/wipes information from [Assignment: organization-defined mobile devices] based on [Assignment: organization-defined purging/wiping requirements/techniques] after [Assignment: organization-defined number] consecutive, unsuccessful device logon attempts.Supplemental
This control enhancement applies only to mobile devices for which a logon occurs (e.g., personal digital assistants, smart phones, tablets). The logon is to the mobile device, not to any one account on the device. Therefore, successful logons to any accounts on mobile devices reset the unsuccessful logon count to zero. Organizations define information to be purged/wiped carefully in order to avoid over purging/wiping which may result in devices becoming unusable. Purging/wiping may be unnecessary if the information on the device is protected with sufficiently strong encryption mechanisms.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Related: AC-19,MP-5,MP-6,SC-13
Category: ACCESS CONTROL
Parent Title: UNSUCCESSFUL LOGON ATTEMPTS
Family: ACCESS CONTROL
Audit Items
View all Reference Audit Items