Title

BlackBerrys with removable memory cards (e.g., MicroSD) must be compliant with requirements. IT Policy rule "External File System Encryption Level" (Security policy group) must be set as required. (Cat II impact)

Discussion

Malware could be downloaded from the memory card to the PC if not compliant.

Check Content

Detailed Policy Requirements: *****For this check, set IT policy “External File System Encryption Level” (Security policy group) to “4 - Encrypt to Device Key (including multi-media directories)". Check Procedures: This is an IT policy check. Recommend all checks related to BES IT Policies be reviewed using the procedures found in check WIR1400-01 (V0003545). *****Verify the IT policy assigned to each user has the IT Policy rule "External File System Encryption Level" (Security policy group) is set as required. Mark as a finding if not set as required.

Fix Text

Configure the IT Policy rule as specified in the "Checks" block.

Additional Identifiers

Rule ID: SV-21914r3_rule

Vulnerability ID: V-19767

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.