Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-254797 | GOOG-13-012200 | SV-254797r959010_rule | Medium |
Description |
---|
If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses unacceptable risk to DOD information systems. An adversary could exploit vulnerabilities created by the weaker configuration to compromise DOD sensitive information. SFR ID: FMT_MOF_EXT.1.2 #24 |
STIG | Date |
---|---|
Google Android 13 COPE Security Technical Implementation Guide | 2024-06-05 |
Check Text ( C-58408r862771_chk ) |
---|
Review the device configuration to confirm that the USB port is disabled except for charging the device. On the EMM console: 1. Open "Set user restrictions". 2. Verify "Enable USB" is toggled to "OFF". If on EMM console the USB port is not disabled, this is a finding. |
Fix Text (F-58354r862772_fix) |
---|
Configure Google Android 13 device to disable the USB port (except for charging the device). COPE and COBO: On the EMM console: 1. Open "Set user restrictions". 2. Toggle "Enable USB" to "OFF". |