Title

LG Android 6.x must implement the management setting: Enable CC mode. (Cat I impact)

Discussion

CC mode implements several security controls required by the Mobile Device Functional Protection Profile (MDFPP). If CC mode is not implemented, DoD data is more at risk of being compromised, and the MD is more at risk of being compromised if lost or stolen. SFR ID: FMT_SMF_EXT.1.1 #45

Check Content

This validation procedure is performed on the MDM Administration Console. On the MDM console, do the following: 1. Ask the MDM administrator to display the "CC Mode" settings in the "Android Restrictions" rule. 2. Verify the value is enabled. 3. Verify the policy has been assigned to all groups. If on the MDM console the "CC Mode" setting is disabled, this is a finding.

Fix Text

Configure the mobile operating system to enable CC mode. On the MDM Administration Console, enable CC mode.

Additional Identifiers

Rule ID: SV-81375r2_rule

Vulnerability ID: V-66885

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.