Title

All PDAs and smartphones must display the required banner during device unlock/ logon. The IT Policy rule “Set Owner Info” must be set as required. (Cat II impact)

Discussion

DoD CIO memo requires all PDAs, BlackBerrys, and smartphones to have a consent banner displayed during logon/device unlock to ensure users understand their responsibilities to safeguard DoD data.

Check Content

Detail Policy Requirements: See Check WIR1455-01 for policy information. *****Set IT Policy rule “Set Owner Info" (Common policy group) to “I've read & consent to terms in IS user agreem't”. Check Procedures: This is a BES IT Policy check. Recommend all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545). *****Verify the IT Policy rule “Set Owner Info“ has been configured as required. Mark as a finding if not set as required.

Fix Text

Configure the IT Policy rule as specified in the "Checks" block.

Additional Identifiers

Rule ID: SV-21156r3_rule

Vulnerability ID: V-19245

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.