Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The MDM server device integrity validation component must not be capable of being disabled or controlled by the user or a mobile device application.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-36187 | SRG-APP-262-MDM-179-MDIS | SV-47591r1_rule | High |
| Description |
|---|
| One of the most significant indicators of an IA attack is modification of operating system files, device drivers, or security enforcement mechanisms. An integrity verification capability or tool detects unauthorized modifications to files or permissions and either prevents further operation or reports its findings so an appropriate response can occur. |
| STIG | Date |
|---|---|
| Mobile Device Manager Security Requirements Guide | 2013-01-24 |
Details
| Check Text ( C-44428r2_chk ) |
|---|
| Review the MDM server configuration to ensure the MDM server device integrity validation component is not capable of being disabled or controlled by the user or a mobile device application. If this function is not present, this is a finding. |
| Fix Text (F-40717r1_fix) |
|---|
| Configure the MDM server device integrity validation component so it cannot be disabled or controlled by the user or a mobile device application. |