Title

IT Policy rule Encryption on On-Board Device Memory Media Files (Security policy group) must be set as required. (Cat II impact)

Discussion

If a media card is inserted in the BlackBerry® device, this rule specifies whether the media files that are located in the media card are encrypted to the user password and the device-generated key. If data is not encrypted, sensitive DoD data could be exposed to unauthorized people.

Check Content

*****For this check, set IT Policy rule "Encryption on On-Board Device Memory Media Files" (Security policy group) to "Required". Check Procedures: This is a BES IT Policy check. Recommend all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545). *****Verify IT Policy rule "Encryption on On-Board Device Memory Media Files" (Security policy group) is set as required. If not set as required, this is a finding.

Fix Text

Configure the IT Policy rule as specified in the "Checks" block.

Additional Identifiers

Rule ID: SV-25482r4_rule

Vulnerability ID: V-22050

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.