Title

IT Policy rule “Force Load Message” (Desktop-Only policy group) must be set as required. (Cat III impact)

Discussion

Required software update may not be installed, resulting in un-patched system.

Check Content

Detailed Policy Requirements: Users must be forced to install critical software updates and be notified when a software update is available. *****For this check, a notification message will be added to the IT Policy rule "Force Load Message" (Desktop-Only policy group). See the BlackBerry STIG Overview for an example. Check Procedures: This is a BES IT Policy check. Recommend all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545). *****Verify IT Policy rule "Force Load Message" (Desktop-Only policy group) is set as required. If not set as required, this is not a finding.

Fix Text

Configure the IT Policy rule as specified in the "Checks" block.

Additional Identifiers

Rule ID: SV-21860r4_rule

Vulnerability ID: V-19719

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.