Detections
Analytics

AirWatch - CIS Google Android v1.2.0 L1

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: AirWatch - CIS Google Android v1.2.0 L1

Updated: 11/6/2019

Authority: CIS

Plugin: MDM

Revision: 1.3

Estimated Item Count: 34

File Details

Filename: CIS_Google_Android_L1_v1.2.0-AirWatch.audit

Size: 47.5 kB

MD5: d8316b631ec87e22f7e0dad1918c57c3
SHA256: 6a587fd1296e79424ee7bdfc722b63e8842576a94ab745c6436092599b44a237

Audit Items

DescriptionCategories
1.1 Ensure device firmware is up to date
1.2 Ensure 'Screen Lock' is set to Enabled

ACCESS CONTROL

1.3 Ensure 'Make pattern visible' is set to Disabled (if using a pattern as device lock mechanism)
1.4 Ensure 'Automatically Lock' is set to 'Immediately'

IDENTIFICATION AND AUTHENTICATION

1.5 Ensure 'Power button instantly locks' is set to Enabled

IDENTIFICATION AND AUTHENTICATION

1.6 Ensure 'Lock Screen Message' is configured
1.9 Ensure 'Developer Options' is set to Disabled

ACCESS CONTROL, CONFIGURATION MANAGEMENT

1.10 Ensure 'Install unknown apps' is set to Disabled

ACCESS CONTROL, CONFIGURATION MANAGEMENT

1.11 Do not root your device
1.15 Ensure 'Automatic date & time' and 'Automatic time zone' are set to Enabled
1.16 Ensure 'Remotely locate this device' is set to Enabled
1.17 Ensure 'Allow remote lock and erase' is set to Enabled
1.18 Ensure 'Scan device for security threats' is set to Enabled
1.19 Ensure 'Improve harmful app detection' is set to Enabled
1.20 Ensure 'Ask for unlock pattern/PIN/password before unpinning' is set to Enabled
1.21 Ensure 'Sleep' is set to 1 minute or less

ACCESS CONTROL

1.22 Ensure 'Wi-Fi assistant' is set to Disabled
1.23 Keep device Apps up to date
1.24 Ensure 'Add users from lock screen' is set to Disabled
1.25 Ensure 'Guest profiles' do not exist
1.26 Review app permissions periodically
1.27 Ensure 'Instant apps' is set to Disabled
2.1 Ensure 'Notifications on the lock screen' is set to Disabled

ACCESS CONTROL, CONFIGURATION MANAGEMENT

2.4 Ensure 'Web and App Activity' is set to Disabled
2.6 Ensure 'Device Information' is set to Disabled
2.7 Ensure 'Voice & Audio Activity' is set to Disabled
2.8 Ensure 'YouTube Search History' is set to Disabled
2.9 Ensure 'YouTube Watch History' is set to Disabled
2.10 Ensure 'Google Location History' is set to Disabled
2.11 Ensure 'Opt out of Ads Personalization' is set to Enabled
3.1 Ensure 'Microphone' is set to 'Enabled'

ACCESS CONTROL, CONFIGURATION MANAGEMENT

3.2 Ensure 'Location' is set to 'Enabled'

ACCESS CONTROL, CONFIGURATION MANAGEMENT

3.3 Ensure 'Allow third-party cookies' is set to 'Disabled'

ACCESS CONTROL, CONFIGURATION MANAGEMENT

3.4 Ensure 'Safe Browsing' is set to 'Enabled'