GOOG-10-000100 - Google Android 10 must be configured to enforce a minimum password length of six characters.

800-53|IA-5(1)(a)

CAT|II

CCI|CCI-000205

Rule-ID|SV-237000r639146_rule

STIG-ID|GOOG-10-000100

STIG-Legacy|SV-108025

STIG-Legacy|V-98921

Vuln-ID|V-237000

GOOG-10-000200 - Google Android 10 must be configured to not allow passwords that include more than two repeating or sequential characters - Minimum complex characters

800-53|CM-6b.

CCI|CCI-000366

Rule-ID|SV-237001r639149_rule

STIG-ID|GOOG-10-000200

STIG-Legacy|SV-108027

STIG-Legacy|V-98923

Vuln-ID|V-237001

GOOG-10-000200 - Google Android 10 must be configured to not allow passwords that include more than two repeating or sequential characters - Type

GOOG-10-000300 - Google Android 10 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.

800-53|AC-11a.

CCI|CCI-000057

Rule-ID|SV-237002r639152_rule

STIG-ID|GOOG-10-000300

STIG-Legacy|SV-108029

STIG-Legacy|V-98925

Vuln-ID|V-237002

GOOG-10-000400 - Google Android 10 must be configured to lock the display after 15 minutes (or less) of inactivity.

Rule-ID|SV-237003r639155_rule

STIG-ID|GOOG-10-000400

STIG-Legacy|SV-108031

STIG-Legacy|V-98927

Vuln-ID|V-237003

GOOG-10-000500 - Google Android 10 must be configured to not allow more than 10 consecutive failed authentication attempts.

800-53|AC-7a.

CAT|III

CCI|CCI-000044

Rule-ID|SV-237004r639158_rule

STIG-ID|GOOG-10-000500

STIG-Legacy|SV-108033

STIG-Legacy|V-98929

Vuln-ID|V-237004

GOOG-10-000800 - Google Android 10 must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DoD-approved commercial app repository, MDM server, mobile application store].

800-53|CM-11b.

CCI|CCI-001806

Rule-ID|SV-237005r852645_rule

STIG-ID|GOOG-10-000800

STIG-Legacy|SV-108035

STIG-Legacy|V-98931

Vuln-ID|V-237005

GOOG-10-001000 - Google Android 10 must be configured to enforce an application installation policy by specifying an application whitelist that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].

Rule-ID|SV-237006r852646_rule

STIG-ID|GOOG-10-001000

STIG-Legacy|SV-108037

STIG-Legacy|V-98933

Vuln-ID|V-237006

GOOG-10-001100 - Google Android 10 whitelist must be configured to not include applications with the following characteristics: - back up MD data to non-DoD cloud servers (including user and application access to cloud backup services); - transmit MD diagnostic data to non-DoD servers; - voice assistant application if available when MD is locked; - voice dialing application if available when MD is locked; - allows synchronization of data or applications between devices associated with user; and - allows unencrypted (or encrypted but not FIPS 140-2 validated) data sharing with other MDs or printers.

Rule-ID|SV-237007r852647_rule

STIG-ID|GOOG-10-001100

STIG-Legacy|SV-108039

STIG-Legacy|V-98935

Vuln-ID|V-237007

GOOG-10-001400 - Google Android 10 must be configured to disable Bluetooth or configured via User Based Enforcement (UBE) to allow Bluetooth for only Headset Profile (HSP), HandsFree Profile (HFP), and Serial Port Profile (SPP) - Serial Port Profile capable devices.

800-53|CM-7(1)(b)

CCI|CCI-001761

Rule-ID|SV-237008r852648_rule

STIG-ID|GOOG-10-001400

STIG-Legacy|SV-108041

STIG-Legacy|V-98937

Vuln-ID|V-237008

GOOG-10-001600 - Google Android 10 must be configured to not display the following (work profile) notifications when the device is locked: [selection: - email notifications - calendar appointments - contact associated with phone call notification - text message notification - other application-based notifications - all notifications].

Rule-ID|SV-237009r639173_rule

STIG-ID|GOOG-10-001600

STIG-Legacy|SV-108043

STIG-Legacy|V-98939

Vuln-ID|V-237009

GOOG-10-002300 - Google Android 10 must be configured to disable trust agents. Note: This requirement is not applicable (NA) for specific biometric authentication factors included in the products Common Criteria evaluation - NA for specific biometric authentication factors included in the products Common Criteria evaluation.

800-53|CM-6(1)

800-53|CM-7a.

CCI|CCI-000370

CCI|CCI-000381

Rule-ID|SV-237010r639176_rule

STIG-ID|GOOG-10-002300

STIG-Legacy|SV-108045

STIG-Legacy|V-98941

Vuln-ID|V-237010

GOOG-10-002800 - Google Android 10 must be configured to disable developer modes.

Rule-ID|SV-237011r639179_rule

STIG-ID|GOOG-10-002800

STIG-Legacy|SV-108047

STIG-Legacy|V-98943

Vuln-ID|V-237011

GOOG-10-003400 - Google Android 10 must be configured to display the DoD advisory warning message at start-up or each time the user unlocks the device.

800-53|AC-8a.

CCI|CCI-000048

Rule-ID|SV-237012r639182_rule

STIG-ID|GOOG-10-003400

STIG-Legacy|SV-108049

STIG-Legacy|V-98945

Vuln-ID|V-237012

GOOG-10-003500 - Google Android 10 must be configured to disable USB mass storage mode.

Rule-ID|SV-237013r639185_rule

STIG-ID|GOOG-10-003500

STIG-Legacy|SV-108051

STIG-Legacy|V-98947

Vuln-ID|V-237013

GOOG-10-003700 - Google Android 10 must be configured to not allow backup of [all applications, configuration data] to locally connected systems.

800-53|AC-20(2)

CCI|CCI-000097

Rule-ID|SV-237014r639188_rule

STIG-ID|GOOG-10-003700

STIG-Legacy|SV-108053

STIG-Legacy|V-98949

Vuln-ID|V-237014

GOOG-10-003900 - Google Android 10 must be configured to not allow backup of all applications and configuration data to remote systems.

800-53|AC-20(3)

CCI|CCI-002338

Rule-ID|SV-237015r852649_rule

STIG-ID|GOOG-10-003900

STIG-Legacy|SV-108055

STIG-Legacy|V-98951

Vuln-ID|V-237015

GOOG-10-004500 - Google Android 10 must be configured to disable exceptions to the access control policy that prevents application processes from accessing all data stored by other application processes - Copy/Paste

800-53|AC-4(2)

CCI|CCI-002191

Rule-ID|SV-237016r852650_rule

STIG-ID|GOOG-10-004500

STIG-Legacy|SV-108057

STIG-Legacy|V-98953

Vuln-ID|V-237016

GOOG-10-004500 - Google Android 10 must be configured to disable exceptions to the access control policy that prevents application processes from accessing all data stored by other application processes - Sharing data into the profile

GOOG-10-004700 - Google Android 10 must be configured to disable multi-user modes.

800-53|AC-2a.

CCI|CCI-002110

Rule-ID|SV-237017r852651_rule

STIG-ID|GOOG-10-004700

STIG-Legacy|SV-108059

STIG-Legacy|V-98955

Vuln-ID|V-237017

GOOG-10-005505 - Google Android 10 must be configured to enable audit logging.

800-53|AU-4(1)

CCI|CCI-001851

Rule-ID|SV-237018r852652_rule

STIG-ID|GOOG-10-005505

STIG-Legacy|SV-108061

STIG-Legacy|V-98957

Vuln-ID|V-237018

GOOG-10-006100 - Google Android 10 must be configured to generate audit records for the following auditable events: detected integrity violations.

800-53|AU-12a.

CCI|CCI-000169

Rule-ID|SV-237019r639203_rule

STIG-ID|GOOG-10-006100

STIG-Legacy|SV-108063

STIG-Legacy|V-98959

Vuln-ID|V-237019

GOOG-10-008700 - Google Android 10 users must complete required training.

Rule-ID|SV-237020r639206_rule

STIG-ID|GOOG-10-008700

STIG-Legacy|SV-108065

STIG-Legacy|V-98961

Vuln-ID|V-237020

GOOG-10-008800 - Google Android 10 must be configured to enforce that Wi-Fi Sharing is disabled.

Rule-ID|SV-237021r639209_rule

STIG-ID|GOOG-10-008800

STIG-Legacy|SV-108067

STIG-Legacy|V-98963

Vuln-ID|V-237021

GOOG-10-009000 - Google Android 10 must have the DoD root and intermediate PKI certificates installed.

Rule-ID|SV-237022r639212_rule

STIG-ID|GOOG-10-009000

STIG-Legacy|SV-108069

STIG-Legacy|V-98965

Vuln-ID|V-237022

GOOG-10-009100 - Google Android 10 must allow only the administrator (MDM) to install/remove DoD root and intermediate PKI certificates - MDM to install/remove DoD root and intermediate PKI certificates.

Rule-ID|SV-237023r639215_rule

STIG-ID|GOOG-10-009100

STIG-Legacy|SV-108071

STIG-Legacy|V-98967

Vuln-ID|V-237023

GOOG-10-009200 - The Google Android 10 Work Profile must be configured to prevent users from adding personal email accounts to the work email app.

Rule-ID|SV-237024r639218_rule

STIG-ID|GOOG-10-009200

STIG-Legacy|SV-108073

STIG-Legacy|V-98969

Vuln-ID|V-237024

GOOG-10-009400 - Google Android 10 work profile must be configured to enforce the system application disable list.

Rule-ID|SV-237025r639221_rule

STIG-ID|GOOG-10-009400

STIG-Legacy|SV-108075

STIG-Legacy|V-98971

Vuln-ID|V-237025

GOOG-10-009600 - Google Android 10 must be provisioned as a fully managed device and configured to create a work profile.

Rule-ID|SV-237026r639224_rule

STIG-ID|GOOG-10-009600

STIG-Legacy|SV-108077

STIG-Legacy|V-98973

Vuln-ID|V-237026

GOOG-10-009800 - Google Android 10 work profile must be configured to disable automatic completion of work space Internet browser text input.

Rule-ID|SV-237027r639227_rule

STIG-ID|GOOG-10-009800

STIG-Legacy|SV-108079

STIG-Legacy|V-98975

Detections

Analytics

MobileIron - DISA Google Android 10.x v2r1

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous