Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-58931 | MSWP-81-100301 | SV-73361r1_rule | Medium |
Description |
---|
Developer modes circumvent certain security measures, so their use for standard operation is not recommended. Developer modes may increase the likelihood of compromise of confidentiality, integrity, and availability. SFR ID: FMT_SMF.1.1 #21 |
STIG | Date |
---|---|
Microsoft Windows Phone 8.1 Security Technical Implementation Guide | 2015-03-26 |
Check Text ( C-59759r1_chk ) |
---|
This validation procedure is performed on the MDM administration console: On the MDM administration console: 1. Ask the MDM administrator to verify the phone compliance policy. 2. Find the setting for restricting the Allow Developer Unlock capability. 3. Verify that setting restriction is turned on. If the MDM does not have the policy to disable developer mode enforced, this is a finding. |
Fix Text (F-64323r1_fix) |
---|
Configure the MDM system to require the Allow Developer Unlocking/Developer Mode policy to be disabled for Windows Phone devices. Deploy the MDM policy on managed devices. |