The MDM server must notify when it detects unauthorized changes to security configuration of managed mobile devices.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36165	SRG-APP-286-MDM-163-MDM	SV-47569r1_rule		High

Description
Incident response functions are intended to monitor, detect, and alarm on defined events occurring on the system or on the network. A large part of their functionality is accurate and timely notification of events. Notifications can be made more efficient by the creation of notification groups containing members who would be responding to a particular alarm or event.

STIG	Date
Mobile Device Manager Security Requirements Guide	2013-01-24

Details

Check Text ( C-44405r1_chk )
Review the MDM server configuration to ensure the MDM server notifies when it detects unauthorized changes to security configuration of managed mobile devices. If the MDM server does not notify in this case, this is a finding.

Fix Text (F-40695r1_fix)
Configure the MDM server to notify when it detects unauthorized changes to security configuration of managed mobile devices.