An error occurred:

Google Android 12 COPE STIG

Google Android 12 COPE Security Technical Implementation Guide

ID Vuln ID Title Cat Status
GOOG-12-002800 V-250418 Google Android 12 must be configured to enable audit logging. Cat II
GOOG-12-006000 V-250419 Google Android 12 must be configured to enforce a minimum password length of six characters. Cat II
GOOG-12-006100 V-250420 Google Android 12 must be configured to not allow passwords that include more than two repeating or sequential characters. Cat II
GOOG-12-006200 V-250421 Google Android 12 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity. Cat II
GOOG-12-006300 V-250422 Google Android 12 must be configured to lock the display after 15 minutes (or less) of inactivity. Cat II
GOOG-12-006400 V-250423 Google Android 12 must be configured to not allow more than 10 consecutive failed authentication attempts. Cat II
GOOG-12-006500 V-250424 Google Android 12 must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DoD-approved commercial app repository, MDM server, mobile application store]. Cat II
GOOG-12-006600 V-250425 Google Android 12 must be configured to enforce an application installation policy by specifying an application allowlist that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version]. Cat II
GOOG-12-006700 V-250426 Google Android 12 allowlist must be configured to not include applications with the following characteristics: 1. Back up mobile device (MD) data to non-DoD cloud servers (including user and application access to cloud backup services);2. Transmit MD diagnostic data to non-DoD servers;3. Voice assistant application if available when MD is locked;4. Voice dialing application if available when MD is locked;5. Allows synchronization of data or applications between devices associated with user; and6. Allows unencrypted (or encrypted but not FIPS 140-2 validated) data sharing with other MDs or printers. Cat II
GOOG-12-006800 V-250427 Google Android 12 must be configured to not display the following (work profile) notifications when the device is locked: [selection: a. email notifications b. calendar appointments c. contact associated with phone call notification d. text message notification e. other application-based notifications f. all notifications]. Cat II
GOOG-12-007200 V-250428 Google Android 12 must be configured to disable trust agents. Note: This requirement is not applicable (NA) for specific biometric authentication factors included in the product's Common Criteria evaluation. Cat II
GOOG-12-007400 V-250429 Google Android 12 must be configured to disable developer modes. Cat II
GOOG-12-007700 V-250430 Google Android 12 must be configured to display the DoD advisory warning message at startup or each time the user unlocks the device. Cat III
GOOG-12-007800 V-250431 Google Android 12 must be configured to generate audit records for the following auditable events: detected integrity violations. Cat II
GOOG-12-008400 V-250432 Google Android 12 must be configured to disable USB mass storage mode. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.