Required procedures must be followed for the disposal of smartphones.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-24958	WIR-SPP-004	SV-30695r3_rule	ECSC-1 PECS-1	Low

Description
Procedures must be used to remove DoD information on the wireless email device prior to disposal.

STIG	Date
Smartphone Policy Security Technical Implementation Guide	2011-06-20

Details

Check Text ( C-31118r3_chk )
Prior to disposing of a smartphone (for example, if the smartphone is transferred to another DoD or to other government agencies), follow the disposal procedures found in the STIG Technology Overview document of the STIG for the smartphone of interest. For example, look in the BlackBerry Overview document in the BlackBerry STIG for the disposal procedures for a BlackBerry smartphone or the Windows Mobile Overview in the Good Mobile Messaging STIG for the disposal procedures for a Windows Mobile smartphone. Interview the IAO. Verify proper procedures are being followed and the procedures are documented. Check to see how old smartphones were disposed of during the previous 6 – 12 months and verify compliance with requirements. Note: The site can find disposal procedures listed in the smartphone STIG. Mark as a finding if procedures are not documented, or if documented, they were not followed.

Check Text ( C-31118r3_chk )

Prior to disposing of a smartphone (for example, if the smartphone is transferred to another DoD or to other government agencies), follow the disposal procedures found in the STIG Technology Overview document of the STIG for the smartphone of interest. For example, look in the BlackBerry Overview document in the BlackBerry STIG for the disposal procedures for a BlackBerry smartphone or the Windows Mobile Overview in the Good Mobile Messaging STIG for the disposal procedures for a Windows Mobile smartphone.

Interview the IAO.

Verify proper procedures are being followed and the procedures are documented.

Check to see how old smartphones were disposed of during the previous 6 – 12 months and verify compliance with requirements.

Note: The site can find disposal procedures listed in the smartphone STIG.

Mark as a finding if procedures are not documented, or if documented, they were not followed.

Fix Text (F-27586r2_fix)
Prior to disposing of a smartphone device (for example, if the smartphone is transferred to another DoD or to other government agencies), follow required procedures.