Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-24969 | WIR-SPP-007-02 | SV-30706r6_rule | Low |
Description |
---|
If procedures for lost or stolen mobile devices are not followed, it is more likely that an adversary could obtain the device and use it to access DoD networks or otherwise compromise DoD IA. |
STIG | Date |
---|---|
Mobile Device Policy Security Technical Implementation Guide (STIG) | 2019-05-21 |
Check Text ( C-31133r5_chk ) |
---|
Interview the ISSO. Determine if any site mobile devices were reported lost or stolen within the previous 24 months. If yes, review written records, incident reports, and/or after action reports and determine if required procedures were followed. If the site had a lost or stolen mobile device within the previous 24 months and required procedures were not followed, this is a finding. |
Fix Text (F-27592r4_fix) |
---|
Follow required actions when a mobile device is reported lost or stolen. |