MobileIron - CIS Google Android 7 v1.0.0 L1

Audit Details

Name: MobileIron - CIS Google Android 7 v1.0.0 L1

Updated: 6/17/2024

Authority: CIS

Plugin: MDM

Revision: 1.12

Estimated Item Count: 32

File Details

Filename: CIS_Google_Android_7_L1_v1.0.0-MobileIron.audit

Size: 43.5 kB

MD5: 076d1accf6023833fef47b012fd38519
SHA256: a30298d08ec91d0ef64a6c04a90a9b9624e3ec860f017269688f1971b0160102

Audit Items

DescriptionCategories
1.1 Ensure device firmware is up to date
1.2 Ensure 'Screen Lock' is set to Enabled

ACCESS CONTROL

1.3 Ensure 'Make pattern visible' is set to Disabled (if using a pattern as device lock mechanism)

CONFIGURATION MANAGEMENT

1.4 Ensure 'Automatically Lock' is set to 'Immediately'

IDENTIFICATION AND AUTHENTICATION

1.5 Ensure 'Power button instantly locks' is set to Enabled

IDENTIFICATION AND AUTHENTICATION

1.6 Ensure 'Lock Screen Message' is configured
1.9 Ensure 'Encrypt phone' or 'Encrypt tablet' is set to Enabled

ACCESS CONTROL

1.10 Ensure 'Developer Options' is set to Disabled

CONFIGURATION MANAGEMENT

1.11 Ensure 'Unknown sources' is set to Disabled

CONFIGURATION MANAGEMENT

1.12 Do not root your device

CONFIGURATION MANAGEMENT

1.16 Ensure 'Speak passwords' is set to Disabled

CONFIGURATION MANAGEMENT

1.17 Ensure 'Automatic date & time' and 'Automatic time zone' are set to Enabled
1.18 Ensure 'Remotely locate this device' is set to Enabled
1.19 Ensure 'Allow remote lock and erase' is set to Enabled
1.20 Ensure 'Scan device for security threats' is set to Enabled
1.21 Ensure 'Improve harmful app detection' is set to Enabled
1.22 Ensure 'Ask for unlock pattern/PIN/password before unpinning' is set to Enabled
1.23 Ensure 'Sleep' is set to 1 minute or less

ACCESS CONTROL

1.24 Ensure 'Wi-Fi assistant' is set to Disabled

CONFIGURATION MANAGEMENT

1.25 Keep device Apps up to date
1.26 Ensure 'Add users when device is locked' is set to Disabled

CONFIGURATION MANAGEMENT

1.27 Ensure 'Guest profiles' do not exist
1.28 Review app permissions periodically
1.29 Ensure Wi-Fi hotspot security is set to WPA2-PSK
2.1 Ensure 'Notifications on the lock screen' is set to Disabled

CONFIGURATION MANAGEMENT

2.4 Ensure 'Signed-out search activity' is set to Disabled

CONFIGURATION MANAGEMENT

2.5 Ensure 'Web and App Activity' is set to Disabled

CONFIGURATION MANAGEMENT

2.6 Ensure 'Device Information' is set to Disabled

CONFIGURATION MANAGEMENT

2.7 Ensure 'Voice & Audio Activity' is set to Disabled

CONFIGURATION MANAGEMENT

2.8 Ensure 'YouTube Search History' is set to Disabled

CONFIGURATION MANAGEMENT

2.9 Ensure 'YouTube Watch History' is set to Disabled

CONFIGURATION MANAGEMENT

2.10 Ensure 'Google Location History' is set to Disabled

CONFIGURATION MANAGEMENT