Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-36018 | SRG-APP-004-MDM-013-SRV | SV-47407r1_rule | High |
Description |
---|
If the MDM server does not support a lock feature, then anyone who gains access to the application may be able to access sensitive DoD information or perform other authorized functions. The lock features mitigates the risk of unauthorized access. |
STIG | Date |
---|---|
Mobile Device Manager Security Requirements Guide | 2013-01-24 |
Check Text ( C-44257r1_chk ) |
---|
Review the MDM server configuration to determine whether the system is configured to support a lock feature. If a lock feature is not present, this is a finding. |
Fix Text (F-40548r1_fix) |
---|
Configure the MDM server so the administrator can lock the console. |