The organization must follow required procedures for the disposal of smartphones.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-MPOL-089	SRG-MPOL-089	SRG-MPOL-089_rule		Low

Description
If appropriate procedures are not followed prior to disposal of a smartphone, an adversary may be able to obtain sensitive DoD information or learn aspects of the configuration of the device that might facilitate a subsequent attack.

STIG	Date
Mobile Policy Security Requirements Guide	2012-10-10

Details

Check Text ( C-SRG-MPOL-089_chk )
This requirement applies to mobile operating system (OS) smartphones and tablets. Prior to disposing of a smartphone or if the smartphone is transferred to another DoD or government agency, follow the disposal procedures found in the appropriate security implementation guide for the smartphone of interest. Verify proper procedures are being followed and the procedures are documented. Check to see how retired, discarded, or transitioned smartphones were disposed of during the previous 6 - 12 months and verify compliance with requirements. If procedures are not documented or if documented, they were not followed, this is a finding.

Check Text ( C-SRG-MPOL-089_chk )

This requirement applies to mobile operating system (OS) smartphones and tablets.

Prior to disposing of a smartphone or if the smartphone is transferred to another DoD or government agency, follow the disposal procedures found in the appropriate security implementation guide for the smartphone of interest.

Verify proper procedures are being followed and the procedures are documented.

Check to see how retired, discarded, or transitioned smartphones were disposed of during the previous 6 - 12 months and verify compliance with requirements.

If procedures are not documented or if documented, they were not followed, this is a finding.

Fix Text (F-SRG-MPOL-089_fix)
Prior to disposing of a smartphone or transitioning it to another user, either in DoD or another agency, follow required procedures.