An error occurred:

Commercial Mobile Device (CMD) Policy STIG (STIG)

Commercial Mobile Device (CMD) Policy Security Technical Implementation Guide (STIG)

ID Vuln ID Title Cat Status
WIR-SPP-001 V-24953 Site physical security policy must include a statement outlining whether CMDs with digital cameras (still and video) are permitted or prohibited on or in this DoD facility. Cat III
WIR-SPP-003-01 V-24955 A data spill (Classified Message Incident (CMI)) procedure or policy must be published for site CMDs. Cat II
WIR-SPP-003-02 V-24957 If a data spill (Classified Message Incident (CMI)) occurs on a wireless email device or system at a site, the site must follow required data spill procedures. Cat I
WIR-SPP-004 V-24958 Required procedures must be followed for the disposal of CMDs. Cat III
WIR-SPP-005 V-24960 Mobile operating system (OS) based CMDs and systems must not be used to send, receive, store, or process classified messages unless specifically approved by NSA for such purposes and NSA approved transmission and storage methods are used. Cat I
WIR-SPP-006-01 V-24961 Mobile device users must complete training on required content before being provided mobile devices or allowed access to DoD networks with a mobile device. Cat III
WIR-SPP-006-02 V-28317 Mobile users must complete required training annually. Cat III
WIR-SPP-007-01 V-24962 The site Incident Response Plan or other procedure must include procedures to follow when a mobile operating system (OS) based mobile device is reported lost or stolen. Cat III
WIR-SPP-007-02 V-24969 Required actions must be followed at the site when a CMD has been lost or stolen. Cat III
WIR-SPP-008-01 V-24963 The mobile device system administrator must perform a wipe command on all new or reissued CMDs and a STIG-compliant IT policy will be pushed to the device before issuing it to DoD personnel. Cat III
WIR-SPP-008-02 V-24964 Mobile device software updates must only originate from approved DoD sources. Cat III
WIR-SPP-021 V-32677 A security risk analysis must be performed on a mobile application by the Authorizing Official (AO) or AO-authorized authority prior to the application being approved for use. Cat I

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.