UCF STIG Viewer Logo

Remote full device wipe must be enabled.


Overview

Finding ID Version Rule ID IA Controls Severity
V-27635 WIR-MOS-AND-G-008 SV-35227r1_rule ECCR-1 ECWN-1 Medium
Description
Sensitive DoD data could be compromised if mobile OS device data could not be wiped when directed by the system administrator.
STIG Date
Android 2.2 (Dell) Security Technical Implementation Guide 2014-08-26

Details

Check Text ( C-35071r1_chk )
This is a Good security policy set check. Recommend all checks related to Good security policy set rules be reviewed using the following procedure.

1. Make a list of all Good security policy sets assigned to smartphone user accounts on the Good server using the following procedure:

-Have the SA identify any non STIG-compliant policy sets and STIG-compliant policy sets on the server.
--Log into the Good Mobile Control console.
--Click on the Policies tab.
--View all policy set on the server.

-Note: STIG-compliant policy sets should be identified as such in the policy title, for example, STIG_Android_Policy_Set. It is recommended all non STIG-compliant policy sets be deleted.

2. Select each policy set users are assigned to, and in turn, verify the required settings are in the policy set.

Note: If there is a finding, note the name of the non STIG-compliant policy set in the Findings Details section in VMS/Component Provided Tracking Database.
---------------------

-Launch the Good Mobile Control Web console and click on the Policies tab.
-Select the policy set for the Android devices and click on Android Configuration on the left side.

-Click on the General tab.
-Verify "Enable remote full device wipe" is checked.
(Note: “Device Wipe” will wipe all data and non-core applications off the Android device.)

Mark as a finding if configuration is not set as required.
Fix Text (F-30358r2_fix)
Enable remote full device wipe on iOS devices.