All PDAs and smartphones must display the required banner during device unlock/ logon. The IT Policy rule “Set Owner Info” must be set as required.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-19245	WIR1455-02	SV-21156r2_rule	EBCR-1	Medium

Description
DoD CIO memo requires all PDAs, BlackBerrys, and smartphones to have a consent banner displayed during logon/device unlock to ensure users understand their responsibilities to safeguard DoD data.

STIG	Date
BlackBerry Enterprise Server (version 5.x), Part 3 Security Technical Implementation Guide	2013-06-21

Details

Check Text ( C-23269r2_chk )
Detail Policy Requirements: See Check WIR1455-01 for policy information. ***Set IT Policy rule “Set Owner Info" (Common policy group) to “I've read & consent to terms in IS user agreem't”. Check Procedures: This is a BES IT Policy check. Recommend all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545). ***Verify the IT Policy rule “Set Owner Info“ has been configured as required.

Check Text ( C-23269r2_chk )

Detail Policy Requirements:

See Check WIR1455-01 for policy information.

*****Set IT Policy rule “Set Owner Info" (Common policy group) to “I've read & consent to terms in IS user agreem't”.

Check Procedures:

This is a BES IT Policy check. Recommend all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545).

*****Verify the IT Policy rule “Set Owner Info“ has been configured as required.

Fix Text (F-23386r2_fix)
Configure the IT Policy rule Require FIPS Ciphers as specified in the "Checks" block.