Title

Global Positioning System (GPS) must be disabled unless required and approved by the organization. (Cat II impact)

Discussion

GPS may provide sensitive location information through various applications and embedded meta-data.

Check Content

Verify GPS is turned off unless approved by the organization. View status in device manager or GPS management application. If GPS is not approved or disabled, this is a finding. If the system does not have GPS, this is not applicable.

Fix Text

Disable GPS in device manager if not organizationally approved.

Additional Identifiers

Rule ID: SV-48450r2_rule

Vulnerability ID: V-36767

Group Title: WN08-MO-000011

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.