| 1.1 Ensure device firmware is up to date | |
| 1.2 Ensure 'Screen Lock' is set to Enabled | ACCESS CONTROL |
| 1.3 Ensure 'Make pattern visible' is set to Disabled (if using a pattern as device lock mechanism) | CONFIGURATION MANAGEMENT |
| 1.4 Ensure 'Automatically Lock' is set to 'Immediately' | IDENTIFICATION AND AUTHENTICATION |
| 1.5 Ensure 'Power button instantly locks' is set to Enabled | IDENTIFICATION AND AUTHENTICATION |
| 1.6 Ensure 'Lock Screen Message' is configured | |
| 1.9 Ensure 'Encrypt phone' or 'Encrypt tablet' is set to Enabled | ACCESS CONTROL |
| 1.10 Ensure 'Developer Options' is set to Disabled | CONFIGURATION MANAGEMENT |
| 1.11 Ensure 'Unknown sources' is set to Disabled | CONFIGURATION MANAGEMENT |
| 1.12 Do not root your device | CONFIGURATION MANAGEMENT |
| 1.16 Ensure 'Speak passwords' is set to Disabled | CONFIGURATION MANAGEMENT |
| 1.17 Ensure 'Automatic date & time' and 'Automatic time zone' are set to Enabled | |
| 1.18 Ensure 'Remotely locate this device' is set to Enabled | |
| 1.19 Ensure 'Allow remote lock and erase' is set to Enabled | |
| 1.20 Ensure 'Scan device for security threats' is set to Enabled | |
| 1.21 Ensure 'Improve harmful app detection' is set to Enabled | |
| 1.22 Ensure 'Ask for unlock pattern/PIN/password before unpinning' is set to Enabled | |
| 1.23 Ensure 'Sleep' is set to 1 minute or less | ACCESS CONTROL |
| 1.24 Ensure 'Wi-Fi assistant' is set to Disabled | CONFIGURATION MANAGEMENT |
| 1.25 Keep device Apps up to date | |
| 1.26 Ensure 'Add users when device is locked' is set to Disabled | CONFIGURATION MANAGEMENT |
| 1.27 Ensure 'Guest profiles' do not exist | |
| 1.28 Review app permissions periodically | |
| 1.29 Ensure Wi-Fi hotspot security is set to WPA2-PSK | |
| 2.1 Ensure 'Notifications on the lock screen' is set to Disabled | CONFIGURATION MANAGEMENT |
| 2.4 Ensure 'Signed-out search activity' is set to Disabled | CONFIGURATION MANAGEMENT |
| 2.5 Ensure 'Web and App Activity' is set to Disabled | CONFIGURATION MANAGEMENT |
| 2.6 Ensure 'Device Information' is set to Disabled | CONFIGURATION MANAGEMENT |
| 2.7 Ensure 'Voice & Audio Activity' is set to Disabled | CONFIGURATION MANAGEMENT |
| 2.8 Ensure 'YouTube Search History' is set to Disabled | CONFIGURATION MANAGEMENT |
| 2.9 Ensure 'YouTube Watch History' is set to Disabled | CONFIGURATION MANAGEMENT |
| 2.10 Ensure 'Google Location History' is set to Disabled | CONFIGURATION MANAGEMENT |
