The Google Android 14 BYOAD must be configured to disable device cameras and/or microphones when brought into DOD facilities where mobile phone cameras and/or microphones are prohibited.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-260073	GOOG-14-802300	SV-260073r948424_rule		Medium

Description
In some DOD operational environments, the use of the mobile device camera or microphone could lead to a security incident or compromise of DOD information. The System Administrator must have the capability to disable the mobile device camera and/or microphone based on mission needs. Alternatively, mobile devices with cameras or microphones that cannot be disabled must be prohibited from the facility by the ISSO/ISSM. If BYOAD devices are brought into facilities where the AO has determined the risk of using mobile device cameras or microphones is unacceptable, this could lead to the exposure of sensitive DOD data. SFR ID: FMT_SMF_EXT.1.1 #47

Description

In some DOD operational environments, the use of the mobile device camera or microphone could lead to a security incident or compromise of DOD information. The System Administrator must have the capability to disable the mobile device camera and/or microphone based on mission needs. Alternatively, mobile devices with cameras or microphones that cannot be disabled must be prohibited from the facility by the ISSO/ISSM. If BYOAD devices are brought into facilities where the AO has determined the risk of using mobile device cameras or microphones is unacceptable, this could lead to the exposure of sensitive DOD data. SFR ID: FMT_SMF_EXT.1.1 #47

STIG	Date
Google Android 14 BYOAD Security Technical Implementation Guide	2024-02-16

Details

Check Text ( C-63804r948422_chk )
Verify Google Android 14 BYOADs are prohibited in DOD facilities that prohibit mobile devices with cameras and microphones. (It is not possible for the MDM to disable camera and microphones on an Android device in BYOD mode.) If for DOD sites that prohibit mobile devices with cameras and microphones, Google Android 14 BYOADs have not been prohibited from the facility by the ISSO/ISSM, this is a finding.

Check Text ( C-63804r948422_chk )

Verify Google Android 14 BYOADs are prohibited in DOD facilities that prohibit mobile devices with cameras and microphones. (It is not possible for the MDM to disable camera and microphones on an Android device in BYOD mode.)

If for DOD sites that prohibit mobile devices with cameras and microphones, Google Android 14 BYOADs have not been prohibited from the facility by the ISSO/ISSM, this is a finding.

Fix Text (F-63711r948423_fix)
Do not allow Google Android 14 BYOADs in DOD facilities where mobile phone cameras and/or microphones are prohibited. It is not possible for the MDM to disable camera and microphones on an Android device in BYOD mode.