Navigate

Check: BB10-2X-000228

BB10 2 X STIG: BB10-2X-000228 (in version v1 r6)

Title

BlackBerry 10 OS must prevent a user from installing unapproved applications from other sources. (Cat II impact)

Discussion

The operating system must enforce software installation by users based upon what types of software installations are permitted (e.g., updates and security patches to existing software) and what types of installations are prohibited (e.g., software whose pedigree with regard to being potentially malicious is unknown or suspect) by the organization. The installation and execution of unauthorized software on an operating system may allow the application to obtain sensitive information or further compromise the system. Preventing a user from installing unapproved applications mitigates this risk.

Check Content

On BlackBerry Device Service, verify the IT Policy rule "Install Apps From Other Sources" is set to "Disallow". Otherwise, this is a finding.

Fix Text

On BlackBerry Device Service, set the IT Policy rule "Install Apps From Other Sources" to "Disallow".

Additional Identifiers

Rule ID:

Vulnerability ID: V-47187

Group Title:

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-000663	The organization (or information system) enforces explicit rules governing the installation of software by users.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
No controls are assigned to this check