OpenControls Logo

STIG Viewer

STIGViewer Support

Google Android 15 must be configured to disable "Private Space" use.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-269101GOOG-15-012500SV-269101r1033119_ruleCCI-000370high
Description
Private Space is an Android feature that provides a separate encrypted container on the mobile device. Apps in Private Space show up in a separate container in the launcher and are hidden from the "Recents" view, notifications, settings, and other apps when the Private Space is locked. In addition, MDM server allow list or blocklist cannot control the installation of apps into Private Space. Malware and other unauthorized apps could be installed on a DOD mobile device, which could lead to the compromise of DOD sensitive information or to an attack on the DOD network. SFRID: FMT_MOF_EXT.1.2 #47
STIGDate
Google Android 15 COPE Security Technical Implementation Guide2026-02-12

Related Frameworks

1 mapping across 3 frameworks
SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CFG-02.2Automated Central Management & Verification
0.50
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (28) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-10Concurrent Session Control
1.00
AC-17(1)Monitoring and Control
1.00
AC-17(2)Protection of Confidentiality and Integrity Using Encryption
1.00
AC-2(3)Disable Accounts
1.00
AC-3Access Enforcement
1.00
AC-3(7)Role-based Access Control
1.00
AC-4Information Flow Enforcement
1.00
AC-6(10)Prohibit Non-privileged Users from Executing Privileged Functions
1.00
AU-10Non-repudiation
1.00
AU-9Protection of Audit Information
1.00

+18 more (top 10 by confidence shown)

CCI1 mapping
CCI-000370
1.00

Details

Check Text (C-269101r1033119_chk)

Review the Google Android 15 work profile configuration settings to confirm that Private Space is disabled. This procedure is performed only on the EMM Administration console. On the EMM console: COBO: 1. Open "Set user restrictions". 2. Verify "Disallow add private profile" is set to "ON". COPE: 1. Open "Set user restrictions". 2. Verify "Disallow add private profile" is set to "ON". If on the EMM console "Disallow add private profile" is not selected, this is a finding.

Fix Text (F-73033r1032069_fix)

Configure the Google Android 15 device to disable "Private Space". On the EMM console: COBO: 1. Open "Set user restrictions". 2. Toggle "Disallow add private profile" to "ON". COPE: 1. Open "Set user restrictions". 2. Toggle "Disallow add private profile" to "ON".