An error occurred:

General Mobile Device (Non-Sensitive-Non-Network-Connected)

General Mobile Device Policy (Non-Enterprise Activated) Security Technical Implementation Guide

ID Vuln ID Title Cat Status
WIR0005 V-8283 All wireless systems (including associated peripheral devices, operating system, applications, network/PC connection methods, and services) must be approved by the approval authority prior to installation and use for processing DoD information. Cat I
WIR0010-01 V-15782 DAA must approve the use of personally-owned or contractor-owned PEDs used to transmit, receive, store, or process DoD information. Cat II
WIR0010-02 V-28314 If DAA has approved the use of personally-owned or contractor-owned PEDs, the owner must sign a forfeiture agreement in case of a security incident. Cat III
WIR0015 V-8284 The site IAO must maintain a list of all DAA-approved wireless and non-wireless PED devices that store, process, or transmit DoD information. Cat III
WIR0030 V-13982 All users of mobile devices or wireless devices must sign a user agreement before the mobile or wireless device is issued to the user and the user agreement used at the site must include required content. Cat III
WIR-SPP-001 V-24953 Site physical security policy must include a statement if PDAs and smartphones with digital cameras (still and video) are permitted or prohibited on or in this DoD facility. Cat III
WIR-SPP-003-01 V-24955 A data spill (Classified Message Incident (CMI)) procedure or policy must be published for site smartphones and tablets. Cat II
WIR-SPP-003-02 V-24957 If a data spill (Classified Message Incident (CMI)) occurs on a wireless email device or system at a site, the site must follow required data spill procedures. Cat I
WIR-SPP-004 V-24958 Required procedures must be followed for the disposal of smartphones. Cat III
WIR-SPP-005 V-24960 Mobile operating system (OS) based smartphone and tablet devices and systems must not be used to send, receive, store, or process classified messages unless specifically approved by NSA for such purposes and NSA approved transmission and storage methods are used. Cat I
WIR-SPP-006-01 V-24961 Smartphone users must complete required training. Cat III
WIR-SPP-006-02 V-28317 Smartphone/tablet users must complete required training annually. Cat III
WIR-SPP-007-01 V-24962 The site Incident Response Plan or other procedure must include procedures to follow when a mobile operating system (OS) based smartphone or tablet device is reported lost or stolen. Cat III
WIR-SPP-007-02 V-24969 Required actions must be followed at the site when a smartphone has been lost or stolen. Cat III
WIR-SPP-012 V-30413 Smartphones and tablets classified as non-enterprise activated must not be connected to a DoD network. Cat I

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.