IT Policy rule “Encryption on On-Board Device Memory Media Files” (Security policy group) must be set as required.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22050	WIR1445-03	SV-25482r2_rule	ECWN-1	Medium

Description
If a media card is inserted in the BlackBerry® device, this rule specifies whether the media files that are located in the media card are encrypted to the user password and the device-generated key. If data is not encrypted, sensitive DoD data could be exposed to unauthorized people.

STIG	Date
BlackBerry Enterprise Server (version 5.x), Part 3 Security Technical Implementation Guide	2013-03-21

Details

Check Text ( C-27001r2_chk )
***For this check, set IT Policy rule “Encryption on On-Board Device Memory Media Files” (Security policy group) to “Required”. Check Procedures: This is a BES IT Policy check. Recommend all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545). ***Verify IT Policy rule “Encryption on On-Board Device Memory Media Files” (Security policy group) is set as required.

Check Text ( C-27001r2_chk )

*****For this check, set IT Policy rule “Encryption on On-Board Device Memory Media Files” (Security policy group) to “Required”.

Check Procedures:
This is a BES IT Policy check. Recommend all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545).

*****Verify IT Policy rule “Encryption on On-Board Device Memory Media Files” (Security policy group) is set as required.

Fix Text (F-23386r1_fix)
Configure the IT Policy rule as specified in the "Checks" block.