Title

BlackBerry devices must be protected by authenticated login procedures to unlock the device. IT Policy rule “Set Maximum Password Attempts” (Password policy group) must be set as required. (Cat I impact)

Discussion

Authenticated device unlock is a key security control for the BlackBerry system to restrict access to DoD data by unauthorized individuals.

Check Content

Detailed Policy Requirements: See Check WIR1400-01 (V0003545) for detailed policy requirements. *****For this check, Set IT Policy rule "Set Maximum Password Attempts" (Password policy group) to "10 or less". Check Procedures: This is a BES IT Policy check. Recommend all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545). *****Verify IT Policy rule "Set Maximum Password Attempts" (Password policy group) is set as required. If not set as required, this is a finding.

Fix Text

Configure the IT Policy rule as specified in the "Checks" block.

Additional Identifiers

Rule ID: SV-21149r4_rule

Vulnerability ID: V-19239

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.