Google Android 12 must be configured to disable all data signaling over [assignment: list of externally accessible hardware ports (for example, USB)].

Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Google Android 12 must be configured to disable all data signaling over [assignment: list of externally accessible hardware ports (for example, USB)].

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-250454	GOOG-12-012200	SV-250454r802706_rule		Medium

Description
If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses unacceptable risk to DoD information systems. An adversary could exploit vulnerabilities created by the weaker configuration to compromise DoD sensitive information. SFR ID: FMT_MOF_EXT.1.2 #24

STIG	Date
Google Android 12 COPE Security Technical Implementation Guide	2021-09-17

Details

Check Text ( C-53889r796868_chk )
Review the device configuration to confirm that the USB port is disabled except for charging the device. On the EMM console: 1. Open "Set user restrictions".. 2. Verify that "Enable USB" is toggled to OFF. If on EMM console the USB port is not disabled, this is a finding.

Fix Text (F-53843r796869_fix)
Configure Google Android 12 device to disable the USB port (except for charging the device). COPE and COBO: On the EMM console: 1. Open "Set user restrictions".. 2. Toggle "Enable USB" to OFF.