The Good Mobility Suite must be configured to provide the administrative functionality to transmit a remote Data Wipe command, including removable media cards, to a managed mobile device.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-53133	GOOD-00-000180	SV-67349r1_rule		Medium

Description
Without a Data Wipe capability, the data on the mobile device can be compromised in the event of a lost or stolen device.

STIG	Date
Good for Enterprise 8.x Security Technical Implementation Guide	2014-08-18

Details

Check Text ( C-54629r1_chk )
Review the Good Mobility Suite configuration to determine whether there is administrative functionality to transmit a remote data wipe command, including removable media cards, to a managed mobile device. Otherwise, this is a finding.

Fix Text (F-57943r1_fix)
Configure the Good Mobility Suite so it has the administrative functionality to transmit a remote data wipe command, including removable media cards, to a managed mobile device. Enable iOS MDM Profile 1. Select each security policy iOS devices are assigned to, and, in turn, verify the required settings are in the policy. Verify the latest available version of the MDM agent is set in the compliance rule. -Verify "Enable MDM profile" is checked. -Verify "Enable remote full device wipe" is checked.

Fix Text (F-57943r1_fix)

Configure the Good Mobility Suite so it has the administrative functionality to transmit a remote data wipe command, including removable media cards, to a managed mobile device.

Enable iOS MDM Profile

1. Select each security policy iOS devices are assigned to, and, in turn, verify the required settings are in the policy. Verify the latest available version of the MDM agent is set in the compliance rule.

-Verify "Enable MDM profile" is checked.
-Verify "Enable remote full device wipe" is checked.