Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-19732 | WIR1450-17 | SV-21873r2_rule | ECSC-1 | Medium |
Description |
---|
Application could reset the inactivity timeout on the Blackberry so that the Blackberry screen and keyboard would not lock after a specified period of inactivity. The Blackberry would then be accessible to a hacker or other unauthorized person. |
STIG | Date |
---|---|
BlackBerry Enterprise Server, Part 3 Security Technical Implementation Guide | 2011-07-14 |
Check Text ( C-24169r2_chk ) |
---|
Detailed Policy Requirements: See Check WIR1100-01 (V0003545 ) for detailed policy requirements. *****For this check, set IT Policy rule “Allow Resetting of Idle Timer” (Security policy group) to “No" or "FALSE.” Check Procedures: This is a BES IT Policy check. Recommend that all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545). *****Verify IT Policy rule “Allow Resetting of Idle Timer” (Security policy group) is set as required. |
Fix Text (F-23386r1_fix) |
---|
Configure the IT Policy rule as specified in the "Checks" block. |