Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-25007 | WIR-MOS-NS-010 | SV-40111r2_rule | ECWN-1 IAIA-1 | Low |
Description |
---|
Sensitive DoD data could be compromised if a device unlock password/passcode is not set up on DoD smartphones. |
STIG | Date |
---|---|
BlackBerry Playbook OS (NEA mode) Security Technical Implementation Guide (STIG) | 2012-09-21 |
Check Text ( C-39059r1_chk ) |
---|
This check applies to any mobile device (smartphones, tablets, etc.). Check a sample of 2-3 devices managed by the site to verify a device unlock password/passcode has been enabled on the device. The exact procedure will vary, depending on the OS. Have the user show that a device unlock password/passcode has been enabled on the device. Mark as a finding if configuration is not set as required. |
Fix Text (F-27657r2_fix) |
---|
Configure the iOS device to require a passcode for device unlock. |