Title

Required actions must be followed at the site when a smartphone has been lost or stolen. (Cat III impact)

Discussion

If procedures for lost or stolen smartphones/tablets are not followed, it is more likely that an adversary could obtain the device and use it to access DoD networks or otherwise compromise DoD IA.

Check Content

Interview the IAO. Determine if any site mobile devices were reported lost or stolen within the previous 24 months. If yes, review written records, incident reports, and/or after action reports and determine if required procedures were followed. Mark as a finding if the site had a lost or stolen mobile device within the previous 24 months and required procedures were not followed.

Fix Text

Required actions must be followed at the site when a smartphone/tablet is reported lost or stolen.

Additional Identifiers

Rule ID: SV-30706r5_rule

Vulnerability ID: V-24969

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.