Required procedures must be followed for the disposal of mobile devices.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-24958	WIR-SPP-004	SV-30695r7_rule		Low

Description
If appropriate procedures are not followed prior to disposal of a mobile device, an adversary may be able to obtain sensitive DoD information or learn aspects of the configuration of the device that might facilitate a subsequent attack.

STIG	Date
Mobile Device Policy Security Technical Implementation Guide (STIG)	2019-05-21

Details

Check Text ( C-31118r9_chk )
This requirement applies to mobile operating system (OS) mobile devices. Prior to disposing of a mobile device (for example, if a mobile device is transferred to another DoD or government agency), follow the disposal procedures found in the mobile operating system STIG Supplemental document. Interview the ISSO. Verify proper procedures are being followed and the procedures are documented. Check to see how retired, discarded, or transitioned mobile devices were disposed of during the previous 6 – 12 months and verify compliance with requirements. If procedures are not documented or if documented, they were not followed, this is a finding.

Check Text ( C-31118r9_chk )

This requirement applies to mobile operating system (OS) mobile devices.

Prior to disposing of a mobile device (for example, if a mobile device is transferred to another DoD or government agency), follow the disposal procedures found in the mobile operating system STIG Supplemental document.

Interview the ISSO.

Verify proper procedures are being followed and the procedures are documented.

Check to see how retired, discarded, or transitioned mobile devices were disposed of during the previous 6 – 12 months and verify compliance with requirements.

If procedures are not documented or if documented, they were not followed, this is a finding.

Fix Text (F-27586r4_fix)
Follow required procedures prior to disposing of a mobile device or transitioning it to another user.