MSFT-11-000100 - Microsoft Android 11 must be configured to enforce a minimum password length of six characters.

CAT|II

CCI|CCI-000205

Rule-ID|SV-255167r870642_rule

STIG-ID|MSFT-11-000100

Vuln-ID|V-255167

MSFT-11-000200 - Microsoft Android 11 must be configured to not allow passwords that include more than two repeating or sequential characters - Characters

CCI|CCI-000366

Rule-ID|SV-255168r870644_rule

STIG-ID|MSFT-11-000200

Vuln-ID|V-255168

MSFT-11-000200 - Microsoft Android 11 must be configured to not allow passwords that include more than two repeating or sequential characters - Numbers

MSFT-11-000300 - Microsoft Android 11 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.

CCI|CCI-000057

Rule-ID|SV-255169r877006_rule

STIG-ID|MSFT-11-000300

Vuln-ID|V-255169

MSFT-11-000400 - Microsoft Android 11 must be configured to lock the display after 15 minutes (or less) of inactivity.

Rule-ID|SV-255170r870650_rule

STIG-ID|MSFT-11-000400

Vuln-ID|V-255170

MSFT-11-000500 - Microsoft Android 11 must be configured to not allow more than 10 consecutive failed authentication attempts.

CCI|CCI-000044

Rule-ID|SV-255171r870653_rule

STIG-ID|MSFT-11-000500

Vuln-ID|V-255171

MSFT-11-000800 - Microsoft Android 11 must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DOD-approved commercial app repository, EMM server, mobile application store].

Rule-ID|SV-255172r870656_rule

STIG-ID|MSFT-11-000800

Vuln-ID|V-255172

MSFT-11-001000 - Microsoft Android 11 must be configured to enforce an application installation policy by specifying an application allow list that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].

CCI|CCI-001764

Rule-ID|SV-255173r870659_rule

STIG-ID|MSFT-11-001000

Vuln-ID|V-255173

MSFT-11-001100 - Microsoft Android 11 allow list must be configured to not include applications with the following characteristics:

Rule-ID|SV-255174r870662_rule

STIG-ID|MSFT-11-001100

Vuln-ID|V-255174

MSFT-11-001400 - Microsoft Android 11 must be configured to disable Bluetooth or configured via User Based Enforcement (UBE) to allow Bluetooth for only Headset Profile (HSP), HandsFree Profile (HFP), and Serial Port Profile (SPP).

CAT|III

CCI|CCI-001761

Rule-ID|SV-255175r870665_rule

STIG-ID|MSFT-11-001400

Vuln-ID|V-255175

MSFT-11-001600 - Microsoft Android 11 must be configured to not display the following (work profile) notifications when the device is locked:

CCI|CCI-000060

Rule-ID|SV-255176r870668_rule

STIG-ID|MSFT-11-001600

Vuln-ID|V-255176

MSFT-11-002000 - Microsoft Android 11 must be configured to enable encryption for data at rest on removable storage media or alternately, the use of removable storage media must be disabled.

CAT|I

CCI|CCI-001199

CCI|CCI-002235

Rule-ID|SV-255177r870671_rule

STIG-ID|MSFT-11-002000

Vuln-ID|V-255177

MSFT-11-002300 - Microsoft Android 11 must be configured to disable trust agents.

CCI|CCI-000370

CCI|CCI-000381

Rule-ID|SV-255178r870672_rule

STIG-ID|MSFT-11-002300

Vuln-ID|V-255178

MSFT-11-002800 - Microsoft Android 11 must be configured to disable developer modes.

Rule-ID|SV-255179r870675_rule

STIG-ID|MSFT-11-002800

Vuln-ID|V-255179

MSFT-11-003400 - Microsoft Android 11 must be configured to display the DOD advisory warning message at start-up or each time the user unlocks the device.

CCI|CCI-000048

Rule-ID|SV-255180r870678_rule

STIG-ID|MSFT-11-003400

Vuln-ID|V-255180

MSFT-11-003500 - Microsoft Android 11 must be configured to disable USB mass storage mode.

CCI|CCI-002546

Rule-ID|SV-255181r870680_rule

STIG-ID|MSFT-11-003500

Vuln-ID|V-255181

MSFT-11-003700 - Microsoft Android 11 must be configured to not allow backup of [all applications, configuration data] to locally connected systems.

CCI|CCI-001090

Rule-ID|SV-255182r870682_rule

STIG-ID|MSFT-11-003700

Vuln-ID|V-255182

MSFT-11-003900 - Microsoft Android 11 must be configured to not allow backup of all applications and configuration data to remote systems.

Rule-ID|SV-255183r870685_rule

STIG-ID|MSFT-11-003900

Vuln-ID|V-255183

MSFT-11-004700 - Microsoft Android 11 must be configured to disable multi-user modes.

CCI|CCI-002110

Rule-ID|SV-255184r870687_rule

STIG-ID|MSFT-11-004700

Vuln-ID|V-255184

MSFT-11-005200 - The mobile operating system must allow only the Administrator (MDM) to perform the following management function: Enable/disable location services.

Rule-ID|SV-255185r870803_rule

STIG-ID|MSFT-11-005200

Vuln-ID|V-255185

MSFT-11-005400 - Microsoft Android 11 must allow the Administrator (EMM) to perform the following management function: Wipe Enterprise data.

CCI|CCI-002242

Rule-ID|SV-255186r870805_rule

STIG-ID|MSFT-11-005400

Vuln-ID|V-255186

MSFT-11-005505 - Microsoft Android 11 must be configured to enable audit logging.

CCI|CCI-001851

Rule-ID|SV-255187r870789_rule

STIG-ID|MSFT-11-005505

Vuln-ID|V-255187

MSFT-11-006100 - Microsoft Android 11 must be configured to generate audit records for the following auditable events: Detected integrity violations.

CCI|CCI-000169

Rule-ID|SV-255188r870696_rule

STIG-ID|MSFT-11-006100

Vuln-ID|V-255188

MSFT-11-008700 - Microsoft Android 11 users must complete required training.

Rule-ID|SV-255189r870697_rule

STIG-ID|MSFT-11-008700

Vuln-ID|V-255189

MSFT-11-008800 - Microsoft Android 11 must be configured to enforce that Wi-Fi Sharing is disabled.

Rule-ID|SV-255190r870791_rule

STIG-ID|MSFT-11-008800

Vuln-ID|V-255190

MSFT-11-009000 - Microsoft Android 11 must have the DOD root and intermediate PKI certificates installed.

Rule-ID|SV-255191r870793_rule

STIG-ID|MSFT-11-009000

Vuln-ID|V-255191

MSFT-11-009100 - Microsoft Android 11 must allow only the administrator (EMM) to install/remove DOD root and intermediate PKI certificates.

Rule-ID|SV-255192r870795_rule

STIG-ID|MSFT-11-009100

Vuln-ID|V-255192

MSFT-11-009200 - The Microsoft Android 11 Work Profile must be configured to prevent users from adding personal email accounts to the work email app.

Rule-ID|SV-255193r870797_rule

STIG-ID|MSFT-11-009200

Vuln-ID|V-255193

MSFT-11-009400 - Microsoft Android 11 Work Profile must be configured to enforce the system application disable list.

Rule-ID|SV-255194r870702_rule

STIG-ID|MSFT-11-009400

Vuln-ID|V-255194

MSFT-11-009800 - Microsoft Android 11 Work Profile must be configured to disable automatic completion of work space internet browser text input.

Rule-ID|SV-255195r870809_rule

STIG-ID|MSFT-11-009800

Vuln-ID|V-255195

MSFT-11-010000 - Microsoft Android 11 Work Profile must be configured to disable the autofill services.

Rule-ID|SV-255196r870704_rule

STIG-ID|MSFT-11-010000

Vuln-ID|V-255196

MSFT-11-010200 - Microsoft Android 11 must be configured to disallow configuration of date and time.

Rule-ID|SV-255197r870799_rule

STIG-ID|MSFT-11-010200

Vuln-ID|V-255197

MSFT-11-010800 - Microsoft Android 11 devices must have the latest available Microsoft Android 11 operating system installed.

Rule-ID|SV-255198r870801_rule

STIG-ID|MSFT-11-010800

Vuln-ID|V-255198

MSFT-11-011000 - Microsoft Android 11 devices must be configured to disable the use of third-party keyboards.

Rule-ID|SV-255199r870707_rule

STIG-ID|MSFT-11-011000

Vuln-ID|V-255199

MSFT-11-011100 - Microsoft Android 11 devices must be configured to enable Common Criteria Mode (CC Mode).

Detections

Analytics

AirWatch - DISA Microsoft Android 11 COBO v1r1

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.2 Aug 26, 2024 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.1 Jun 17, 2024 Miscellaneous Metadata updated. References updated.

Detections

Analytics

AirWatch - DISA Microsoft Android 11 COBO v1r1 Download File

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

AirWatch - DISA Microsoft Android 11 COBO v1r1