IT Policy rule “Force Load Message” (Desktop-Only policy group) must be set as required.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-19719	WIR1450-04	SV-21860r4_rule	ECSC-1	Low

Description
Required software update may not be installed, resulting in un-patched system.

STIG	Date
BlackBerry Enterprise Server (version 5.x), Part 3 Security Technical Implementation Guide	2015-07-02

Details

Check Text ( C-24156r4_chk )
Detailed Policy Requirements: Users must be forced to install critical software updates and be notified when a software update is available. ***For this check, a notification message will be added to the IT Policy rule "Force Load Message" (Desktop-Only policy group). See the BlackBerry STIG Overview for an example. Check Procedures: This is a BES IT Policy check. Recommend all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545). ***Verify IT Policy rule "Force Load Message" (Desktop-Only policy group) is set as required. If not set as required, this is not a finding.

Check Text ( C-24156r4_chk )

Detailed Policy Requirements:

Users must be forced to install critical software updates and be notified when a software update is available.

*****For this check, a notification message will be added to the IT Policy rule "Force Load Message" (Desktop-Only policy group). See the BlackBerry STIG Overview for an example.

Check Procedures:

This is a BES IT Policy check. Recommend all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545).

*****Verify IT Policy rule "Force Load Message" (Desktop-Only policy group) is set as required.

If not set as required, this is not a finding.

Fix Text (F-23386r4_fix)
Configure the IT Policy rule as specified in the "Checks" block.