Detections
Analytics

MobileIron - CIS Google Android v1.2.0 L1

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: MobileIron - CIS Google Android v1.2.0 L1

Updated: 11/6/2019

Authority: CIS

Plugin: MDM

Revision: 1.3

Estimated Item Count: 34

Audit Items

DescriptionCategories
1.1 Ensure device firmware is up to date
1.2 Ensure 'Screen Lock' is set to Enabled

ACCESS CONTROL

1.3 Ensure 'Make pattern visible' is set to Disabled (if using a pattern as device lock mechanism)
1.4 Ensure 'Automatically Lock' is set to 'Immediately'

IDENTIFICATION AND AUTHENTICATION

1.5 Ensure 'Power button instantly locks' is set to Enabled

IDENTIFICATION AND AUTHENTICATION

1.6 Ensure 'Lock Screen Message' is configured
1.9 Ensure 'Developer Options' is set to Disabled
1.10 Ensure 'Install unknown apps' is set to Disabled
1.11 Do not root your device

CONFIGURATION MANAGEMENT

1.15 Ensure 'Automatic date & time' and 'Automatic time zone' are set to Enabled
1.16 Ensure 'Remotely locate this device' is set to Enabled
1.17 Ensure 'Allow remote lock and erase' is set to Enabled
1.18 Ensure 'Scan device for security threats' is set to Enabled
1.19 Ensure 'Improve harmful app detection' is set to Enabled
1.20 Ensure 'Ask for unlock pattern/PIN/password before unpinning' is set to Enabled
1.21 Ensure 'Sleep' is set to 1 minute or less

ACCESS CONTROL

1.22 Ensure 'Wi-Fi assistant' is set to Disabled
1.23 Keep device Apps up to date
1.24 Ensure 'Add users from lock screen' is set to Disabled
1.25 Ensure 'Guest profiles' do not exist
1.26 Review app permissions periodically
1.27 Ensure 'Instant apps' is set to Disabled
2.1 Ensure 'Notifications on the lock screen' is set to Disabled
2.4 Ensure 'Web and App Activity' is set to Disabled
2.5 Ensure 'Device Information' is set to Disabled
2.6 Ensure 'Voice & Audio Activity' is set to Disabled
2.7 Ensure 'YouTube Search History' is set to Disabled
2.8 Ensure 'YouTube Watch History' is set to Disabled
2.9 Ensure 'Google Location History' is set to Disabled
2.10 Ensure 'Opt out of Ads Personalization' is set to Enabled
3.1 Ensure 'Microphone' is set to 'Enabled'

ACCESS CONTROL, CONFIGURATION MANAGEMENT

3.2 Ensure 'Location' is set to 'Enabled'
3.3 Ensure 'Allow third-party cookies' is set to 'Disabled'
3.4 Ensure 'Safe Browsing' is set to 'Enabled'