Title

IT Policy rule “Allow Discovery by User” (MDS Integration Service policy group) must be set as required. (Cat II impact)

Discussion

This rule allows a user to search for and install BlackBerry MDS Runtime Applications on a BlackBerry device. This could lead to the installation of unapproved applications and possible malware.

Check Content

Detailed Policy Requirements: Only DoD approved applications will be used. *****For this check, set IT Policy rule “Allow Discovery by User” (MDS Integration Service policy group) to “No”. Check Procedures: This is a BES IT Policy check. Recommend all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545). *****Verify IT Policy “Allow Discovery by User” (MDS Integration Service policy group) is set as required. Mark as a finding if not set as required.

Fix Text

Configure the IT Policy rule as specified in the "Checks" block.

Additional Identifiers

Rule ID: SV-25479r3_rule

Vulnerability ID: V-22048

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.