MSFT-11-000100 - Microsoft Android 11 must be configured to enforce a minimum password length of six characters.

800-53|IA-5(1)(a)

CAT|II

CCI|CCI-000205

Rule-ID|SV-255167r958468_rule

STIG-ID|MSFT-11-000100

Vuln-ID|V-255167

MSFT-11-000200 - Microsoft Android 11 must be configured to not allow passwords that include more than two repeating or sequential characters - Characters

800-53|CM-6b.

CCI|CCI-000366

Rule-ID|SV-255168r959010_rule

STIG-ID|MSFT-11-000200

Vuln-ID|V-255168

MSFT-11-000200 - Microsoft Android 11 must be configured to not allow passwords that include more than two repeating or sequential characters - Numbers

MSFT-11-000300 - Microsoft Android 11 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.

800-53|AC-11a.

CCI|CCI-000057

Rule-ID|SV-255169r958402_rule

STIG-ID|MSFT-11-000300

Vuln-ID|V-255169

MSFT-11-000400 - Microsoft Android 11 must be configured to lock the display after 15 minutes (or less) of inactivity.

Rule-ID|SV-255170r958402_rule

STIG-ID|MSFT-11-000400

Vuln-ID|V-255170

MSFT-11-000500 - Microsoft Android 11 must be configured to not allow more than 10 consecutive failed authentication attempts.

800-53|AC-7a.

CCI|CCI-000044

Rule-ID|SV-255171r958388_rule

STIG-ID|MSFT-11-000500

Vuln-ID|V-255171

MSFT-11-000800 - Microsoft Android 11 must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DOD-approved commercial app repository, EMM server, mobile application store].

Rule-ID|SV-255172r959010_rule

STIG-ID|MSFT-11-000800

Vuln-ID|V-255172

MSFT-11-001000 - Microsoft Android 11 must be configured to enforce an application installation policy by specifying an application allow list that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].

800-53|CM-7(2)

CCI|CCI-001764

Rule-ID|SV-255173r959010_rule

STIG-ID|MSFT-11-001000

Vuln-ID|V-255173

MSFT-11-001100 - Microsoft Android 11 allow list must be configured to not include applications with the following characteristics:

Rule-ID|SV-255174r959010_rule

STIG-ID|MSFT-11-001100

Vuln-ID|V-255174

MSFT-11-001400 - Microsoft Android 11 must be configured to disable Bluetooth or configured via User Based Enforcement (UBE) to allow Bluetooth for only Headset Profile (HSP), HandsFree Profile (HFP), and Serial Port Profile (SPP).

800-53|CM-7(1)(b)

CAT|III

CCI|CCI-001761

Rule-ID|SV-255175r959010_rule

STIG-ID|MSFT-11-001400

Vuln-ID|V-255175

MSFT-11-001600 - Microsoft Android 11 must be configured to not display the following (work profile) notifications when the device is locked:

800-53|AC-11(1)

CCI|CCI-000060

Rule-ID|SV-255176r959010_rule

STIG-ID|MSFT-11-001600

Vuln-ID|V-255176

MSFT-11-002000 - Microsoft Android 11 must be configured to enable encryption for data at rest on removable storage media or alternately, the use of removable storage media must be disabled.

800-53|AC-6(10)

800-53|SC-28

CAT|I

CCI|CCI-001199

CCI|CCI-002235

Rule-ID|SV-255177r958552_rule

STIG-ID|MSFT-11-002000

Vuln-ID|V-255177

MSFT-11-002300 - Microsoft Android 11 must be configured to disable trust agents.

800-53|CM-6(1)

800-53|CM-7a.

CCI|CCI-000370

CCI|CCI-000381

Rule-ID|SV-255178r958478_rule

STIG-ID|MSFT-11-002300

Vuln-ID|V-255178

MSFT-11-002800 - Microsoft Android 11 must be configured to disable developer modes.

Rule-ID|SV-255179r958478_rule

STIG-ID|MSFT-11-002800

Vuln-ID|V-255179

MSFT-11-003400 - Microsoft Android 11 must be configured to display the DOD advisory warning message at start-up or each time the user unlocks the device.

800-53|AC-8a.

CCI|CCI-000048

Rule-ID|SV-255180r958390_rule

STIG-ID|MSFT-11-003400

Vuln-ID|V-255180

MSFT-11-003500 - Microsoft Android 11 must be configured to disable USB mass storage mode.

800-53|SC-41

CCI|CCI-002546

Rule-ID|SV-255181r958478_rule

STIG-ID|MSFT-11-003500

Vuln-ID|V-255181

MSFT-11-003700 - Microsoft Android 11 must be configured to not allow backup of [all applications, configuration data] to locally connected systems.

800-53|SC-4

CCI|CCI-001090

Rule-ID|SV-255182r959010_rule

STIG-ID|MSFT-11-003700

Vuln-ID|V-255182

MSFT-11-003900 - Microsoft Android 11 must be configured to not allow backup of all applications and configuration data to remote systems.

Rule-ID|SV-255183r959010_rule

STIG-ID|MSFT-11-003900

Vuln-ID|V-255183

MSFT-11-004700 - Microsoft Android 11 must be configured to disable multi-user modes.

800-53|AC-2a.

CCI|CCI-002110

Rule-ID|SV-255184r959010_rule

STIG-ID|MSFT-11-004700

Vuln-ID|V-255184

MSFT-11-005200 - The mobile operating system must allow only the Administrator (MDM) to perform the following management function: Enable/disable location services.

Rule-ID|SV-255185r958478_rule

STIG-ID|MSFT-11-005200

Vuln-ID|V-255185

MSFT-11-005400 - Microsoft Android 11 must allow the Administrator (EMM) to perform the following management function: Wipe Enterprise data.

800-53|AC-7(2)

CCI|CCI-002242

Rule-ID|SV-255186r959010_rule

STIG-ID|MSFT-11-005400

Vuln-ID|V-255186

MSFT-11-005505 - Microsoft Android 11 must be configured to enable audit logging.

800-53|AU-4(1)

CCI|CCI-001851

Rule-ID|SV-255187r958754_rule

STIG-ID|MSFT-11-005505

Vuln-ID|V-255187

MSFT-11-006100 - Microsoft Android 11 must be configured to generate audit records for the following auditable events: Detected integrity violations.

800-53|AU-12a.

CCI|CCI-000169

Rule-ID|SV-255188r958442_rule

STIG-ID|MSFT-11-006100

Vuln-ID|V-255188

MSFT-11-008700 - Microsoft Android 11 users must complete required training.

Rule-ID|SV-255189r959010_rule

STIG-ID|MSFT-11-008700

Vuln-ID|V-255189

MSFT-11-008800 - Microsoft Android 11 must be configured to enforce that Wi-Fi Sharing is disabled.

Rule-ID|SV-255190r959010_rule

STIG-ID|MSFT-11-008800

Vuln-ID|V-255190

MSFT-11-009000 - Microsoft Android 11 must have the DOD root and intermediate PKI certificates installed.

Rule-ID|SV-255191r959010_rule

STIG-ID|MSFT-11-009000

Vuln-ID|V-255191

MSFT-11-009100 - Microsoft Android 11 must allow only the administrator (EMM) to install/remove DOD root and intermediate PKI certificates.

Rule-ID|SV-255192r959010_rule

STIG-ID|MSFT-11-009100

Vuln-ID|V-255192

MSFT-11-009200 - The Microsoft Android 11 Work Profile must be configured to prevent users from adding personal email accounts to the work email app.

Rule-ID|SV-255193r959010_rule

STIG-ID|MSFT-11-009200

Vuln-ID|V-255193

MSFT-11-009400 - Microsoft Android 11 Work Profile must be configured to enforce the system application disable list.

Rule-ID|SV-255194r959010_rule

STIG-ID|MSFT-11-009400

Vuln-ID|V-255194

MSFT-11-009800 - Microsoft Android 11 Work Profile must be configured to disable automatic completion of work space internet browser text input.

Rule-ID|SV-255195r959010_rule

STIG-ID|MSFT-11-009800

Vuln-ID|V-255195

MSFT-11-010000 - Microsoft Android 11 Work Profile must be configured to disable the autofill services.

Rule-ID|SV-255196r959010_rule

STIG-ID|MSFT-11-010000

Vuln-ID|V-255196

MSFT-11-010200 - Microsoft Android 11 must be configured to disallow configuration of date and time.

Rule-ID|SV-255197r959010_rule

STIG-ID|MSFT-11-010200

Vuln-ID|V-255197

MSFT-11-010800 - Microsoft Android 11 devices must have the latest available Microsoft Android 11 operating system installed.

Rule-ID|SV-255198r959010_rule

STIG-ID|MSFT-11-010800

Vuln-ID|V-255198

MSFT-11-011000 - Microsoft Android 11 devices must be configured to disable the use of third-party keyboards.

Rule-ID|SV-255199r959010_rule

STIG-ID|MSFT-11-011000

Vuln-ID|V-255199

MSFT-11-011100 - Microsoft Android 11 devices must be configured to enable Common Criteria Mode (CC Mode).

Rule-ID|SV-255200r959010_rule

STIG-ID|MSFT-11-011100

Vuln-ID|V-255200

MSFT-11-999999 - All Microsoft Android 11 installations must be removed.

Rule-ID|SV-264373r985794_rule

STIG-ID|MSFT-11-999999

Vuln-ID|V-264373

Detections

Analytics

AirWatch - DISA Microsoft Android 11 COBO v1r2

Audit Details

File Details

Audit Changelog

No revisions found